Medium
CVE-2025-23536
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-23570
WP Social Links <= 0.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-23670
4 author cheer up donate <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-23425
Marekkis Watermark-Plugin <= 0.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-23494
Quizzin <= 1.01.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-1362
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Cross-Site Request Forgery
Medium
CVE-2025-23487
Easy Gallery <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-0822
Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter
Medium
CVE-2024-13500
WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter
Medium
CVE-2025-1005
ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
Medium
CVE-2024-13752
WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Medium
CVE-2025-0935
Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings Change
Medium
CVE-2024-13563
Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode
Medium
CVE-2024-13525
Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
Critical
CVE-2024-13513
Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation
Medium
CVE-2024-13828
Badgearoo <= 1.0.14 - Reflected Cross-Site Scripting
Medium
CVE-2025-26771
SKT Blocks <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26587
sidebarTabs <= 3.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-26765
Distance Based Shipping Calculator <= 2.0.22 - Missing Authorization
Medium
CVE-2025-26778
Gallery <= 2.2.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-26585
DL Leadback <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-26779
Keep Backup Daily <= 2.1.0 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2025-26759
Content Snippet Manager <= 1.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-26756
Magic the Gathering Card Tooltips <= 3.5.0 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.