Critical
CVE-2024-12860
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-0864
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-13523
MemorialDay <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13522
magayo Lottery Results <= 2.0.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13538
BigBuy Dropshipping Connector for WooCommerce <= 2.0.0 - Unauthenticated Full Path Disclosute
Medium
CVE-2024-13579
WP-Asambleas <= 2.85.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13578
WP-BibTeX <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13540
WooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure
High
CVE-2024-13684
Reset <= 1.6 - Cross-Site Request Forgery to Database Reset
High
CVE-2024-13852
Option Editor <= 1.0 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2024-13848
Reaction Buttons <= 2.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13576
Gumlet Video <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13588
Simplebooklet PDF Viewer and Embedder <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13595
Simple Signup Form <= 1.6.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-13582
Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-13622
File Uploads Addon for WooCommerce <= 1.7.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2024-13565
Simple Map No Api <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
High
CVE-2024-13677
GetBookingsWp - Appointments & Bookings Plugin Basic Version <= 1.1.27 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Critical
CVE-2024-13725
Keap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File Inclusion
Medium
CVE-2024-13581
Simple Charts <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13577
CATS Job Listings <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-0796
Mortgage Lead Capture System <= 8.2.11 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2025-0805
Mortgage Calculator / Loan Calculator <= 1.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12813
Open Hours – Easy Opening Hours <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.