Critical
CVE-2025-1128
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-13667
Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via mle-description
High
CVE-2025-0817
FormCraft - Premium WordPress Form Builder <= 3.9.11 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-13681
Uncode <= 2.9.1.6 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed
High
CVE-2024-13556
Affiliate Links: WordPress Plugin for Link Cloaking and Link Management <= 3.0.1 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection
High
CVE-2024-13797
PressMart - Modern Elementor WooCommerce WordPress Theme <= 1.2.16 - Unauthenticated Arbitrary Shortcode Execution
Critical
CVE-2024-56000
K Elements <= 5.3.9 - Authentication Bypass
High
CVE-2024-13704
Super Testimonials <= 4.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-13718
Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later <= 1.2.26 - Cross-Site Request Forgery to Wishlist Creation/Modification
Medium
CVE-2024-13438
SpeedSize Image & Video AI-Optimizer <= 1.5.1 - Cross-Site Request Forgery to Clear Cache
Medium
CVE-2024-11376
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241216 - Reflected Cross-Site Scripting
Medium
CVE-2025-23515
ts-tree <= 0.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-2247
WP-PManager <= 1.2 - Cross-Site Request Forgery to Category Deletion
Medium
CVE-2025-23956
WP Easy Post Mailer <= 0.64 - Reflected Cross-Site Scripting
Medium
CVE-2025-1363
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-2248
WP-PManager <= 1.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-23536
Track Page Scroll <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-23570
WP Social Links <= 0.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-23670
4 author cheer up donate <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-23425
Marekkis Watermark-Plugin <= 0.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-23494
Quizzin <= 1.01.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-1362
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Cross-Site Request Forgery
Medium
CVE-2025-23487
Easy Gallery <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-0822
Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.