Medium
CVE-2024-13437
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-13531
ShipEngine Shipping Quotes <= 1.0.7 - Unauthenticated SQL Injection
High
CVE-2024-13435
Ebook Downloader <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2025-0506
Rise Blocks – A Complete Gutenberg Page Builder <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleTag Parameter
Medium
CVE-2024-13459
FuseDesk <= 6.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-13473
LTL Freight Quotes - Worldwide Express Edition <= 5.0.20 - Unauthenticated SQL Injection
Critical
CVE-2024-13365
Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-13554
The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation
High
CVE-2024-13654
ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion
High
CVE-2025-22630
Widget Options <= 4.1.0 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2024-13656
Click Mag - Viral WordPress News Magazine/Blog Theme <= 3.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion
Medium
CVE-2024-13601
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2024-12296
Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options
Medium
CVE-2025-22634
Easy Booked – Appointment Booking and Scheduling Management System for WordPress <= 2.4.5 - Cross-Site Request Forgery
Medium
CVE-2024-13658
NGG Smart Image Search <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13541
aDirectory – WordPress Directory Listing Plugin <= 2.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
High
CVE-2024-13475
Small Package Quotes – UPS Edition <= 4.5.16 - Unauthenticated SQL Injection
High
CVE-2024-13600
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2024-13701
Liveticker (by stklcode) <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22629
iNET Webkit <= 1.2.2 - Missing Authorization
Medium
CVE-2024-13665
Admire Extra <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13749
StaffList <= 3.2.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2025-26563
Mobile Plugin <= 1.3.3 - Reflected Cross-Site Scripting
High
CVE-2024-13653
ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.