Medium
CVE-2024-13907
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-13217
Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
Medium
CVE-2025-1286
Download HTML TinyMCE Button <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-1249
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.4.1 - Missing Authorization
Medium
CVE-2024-13880
My Quota <= 1.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-6810
Quiz Organizer <= 2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13560
Subscriptions & Memberships for PayPal <= 1.1.6 - Cross-Site Request Forgery to Arbitrary Post Deletion
Medium
CVE-2025-1517
Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes
Medium
CVE-2024-12434
SureMembers <= 1.10.6 - Sensitive Information Exposure
Medium
CVE-2024-11189
Social Share And Social Locker – ARSocial <= 1.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13803
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10149
Social Slider Feed <= 2.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-27317
RAYS Grid <= 1.3.1 - Cross-Site Request Forgery
Medium
CVE-2025-26883
Animated Text Block <= 1.0.7 - Missing Authorization
Medium
CVE-2025-27316
JPG, PNG Compression and Optimization <= 1.7.35 - Cross-Site Request Forgery
Medium
CVE-2025-26972
Private Content <= 8.11.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-27311
Bulk Content Creator <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2025-26969
Private Content <= 8.11.5 - Missing Authorization
Medium
CVE-2025-1063
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure
High
CVE-2025-27272
VG PostCarousel <= 1.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-27307
Quotes llama <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1262
Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass
Medium
CVE-2025-27349
Get Posts <= 0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26924
Ohio Extra <= 3.4.7 - Unauthenticated Arbitrary Shortcode Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.