Medium
CVE-2024-13462
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-13736
Pure Chat – Live Chat & More! <= 2.4 - Reflected Cross-Site Scripting via purechatWidgetName Parameter
High
CVE-2024-11582
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter
Medium
CVE-2024-13443
Easypromos Plugin <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-13508
Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameter
Medium
CVE-2024-13743
Wonder Video Embed <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2025-27015
Hostiko - Hosting WordPress & WHMCS Theme < 30.1 - Unauthenticated Local File Inclusion
High
CVE-2024-13533
Small Package Quotes – USPS Edition <= 1.3.5 - Unauthenticated SQL Injection
High
CVE-2024-13483
LTL Freight Quotes – SAIA Edition <= 2.2.10 - Unauthenticated SQL Injection
Medium
CVE-2025-27000
Simple Photo Feed <= 1.4.0 - Missing Authorization
Medium
CVE-2024-13615
Social Media Plugin by Social Snap <= 1.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-13491
Small Package Quotes – For Customers of FedEx <= 4.3.1 - Unauthenticated SQL Injection
High
CVE-2024-13481
LTL Freight Quotes – R+L Carriers Edition <= 3.3.4 - Unauthenticated SQL Injection
Medium
CVE-2024-13853
SEO Tools <= 4.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-13836
WP Login Control <= 2.0.0 - Reflected Cross-Site Scripting
High
CVE-2024-13485
LTL Freight Quotes – ABF Freight Edition <= 3.3.7 - Unauthenticated SQL Injection
Medium
CVE-2024-13574
XV Random Quotes <= 1.40 - Reflected Cross-Site Scripting
Medium
CVE-2024-13580
XV Random Quotes <= 1.40 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2025-27013
MediCenter - Health Medical Clinic WordPress Theme <= 14.6 - Missing Authorization
Medium
CVE-2024-13862
S3Bubble Media Streaming <= 8.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-0629
Coronavirus (COVID-19) Notice Message <= 1.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-1441
Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2025-27014
Hostiko - Hosting WordPress & WHMCS Theme < 30.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-27016
Drivr Lite – Google Drive Plugin plugin for WordPress <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.