Medium
CVE-2024-13500
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-1005
ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
Medium
CVE-2024-13752
WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Medium
CVE-2025-0935
Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings Change
Medium
CVE-2024-13563
Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode
Medium
CVE-2024-13525
Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
Critical
CVE-2024-13513
Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation
Medium
CVE-2024-13828
Badgearoo <= 1.0.14 - Reflected Cross-Site Scripting
Medium
CVE-2025-26771
SKT Blocks <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26587
sidebarTabs <= 3.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-26765
Distance Based Shipping Calculator <= 2.0.22 - Missing Authorization
Medium
CVE-2025-26778
Gallery <= 2.2.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-26585
DL Leadback <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-26779
Keep Backup Daily <= 2.1.0 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2025-26759
Content Snippet Manager <= 1.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-26756
Magic the Gathering Card Tooltips <= 3.5.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-26774
Responsive Modal Builder for High Conversion – Easy Popups <= 1.5.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-26769
Vertex Addons for Elementor <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26764
Distance Based Shipping Calculator <= 2.0.22 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-26773
Analytify <= 5.5.0 - Missing Authorization
Medium
CVE-2025-64283
RTMKit <= 1.6.7 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
CVE-2025-26768
what3words Address Field <= 4.0.15 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13825
Email Keep <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-26758
Spotlight Social Media Feeds <= 1.7.1 - Unauthenticated Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.