Medium
CVE-2025-22642
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-25146
Songkick Concerts and Festivals <= 0.9.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22674
Product Blocks for WooCommerce <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25072
WP Admin Custom Page <= 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22643
OnePress <= 2.3.14 - Missing Authorization
Medium
CVE-2025-25140
Simple User Profile <= 1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-22656
Cookie Monster <= 1.2.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22662
SendPulse Email Marketing Newsletter <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25106
Starter Templates by FancyWP <= 2.0.0 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Medium
CVE-2025-22675
Alert Box Block – Display notice/alerts in the front end <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22672
Video & Photo Gallery for Ultimate Member <= 1.1.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-25149
Login-box <= 2.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25125
Fyrebox Quizzes <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12046
Medical Addon for Elementor <= 1.6.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
Medium
CVE-2025-25147
Auto SEO <= 2.5.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22671
Disable Elementor Editor Translation <= 1.0.2 - Missing Authorization
Medium
CVE-2025-25145
Infusionsoft Analytics <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2024-13529
SocialV - Social Network and Community BuddyPress Theme <= 2.0.15 - Missing Authorization to Arbitrary File Download
High
CVE-2025-22677
Uix Shortcodes <= 2.0.3 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-25160
Style Tweaker <= 0.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25099
Appointment Buddy Widget <= 1.2 - Reflected Cross-Site Scripting
High
CVE-2024-12859
BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2025-25080
Kona Gallery Block <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25104
URL-Preview-Box <= 1.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.