Medium
CVE-2025-26572
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-26547
My Login Logout Plugin <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26538
Prezi Embedder <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26543
Simple Responsive Menu <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26567
Font Awesome WP <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26561
Elfsight Yottie Lite <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-26578
Simple Documentation <= 1.2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26582
TinyMCE Advanced qTranslate fix editor problems <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26552
Naver Syndication V2 <= 0.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-26549
WP Html Page Sitemap <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26545
Related Posts Line-up-Exactly by Milliard <= 0.0.22 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26539
Embed Google Map <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13639
Read More & Accordion <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion
High
CVE-2025-0924
WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-13227
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API
Medium
CVE-2024-13229
Rank Math SEO <= 1.0.235 - Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion
High
CVE-2024-13770
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection
Medium
CVE-2024-10322
Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Critical
CVE-2024-13182
WP Directorybox Manager <= 2.5 - Authentication Bypass
High
CVE-2024-13606
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2025-22289
LTL Freight Quotes – Unishippers Edition <= 2.5.8 - Missing Authorization
Critical
CVE-2024-10763
Campress <= 1.35 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22633
Give – Divi Donation Modules <= 2.0.0 - Sensitive Information Dislcosure
Medium
CVE-2025-22287
LTL Freight Quotes – FreightQuote Edition <= 2.3.11 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.