Medium
CVE-2025-22646
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-25103
Indeed API <= 0.5 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-22667
Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets <= 1.8.2 - Missing Authorization
Medium
CVE-2025-24694
CM E-Mail Blacklist – Simple email filtering for safer registration <= 1.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22673
EAN for WooCommerce <= 5.3.5 - Missing Authorization
Medium
CVE-2024-11134
Eventer <= 3.9.9 - Missing Authorization to Authenticated (Subscriber+) Bookings Export
Medium
CVE-2025-25077
Easy Chart Builder for WordPress <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22649
WP Project Manager <= 2.6.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22652
Payment Forms for Paystack <= 4.0.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-22648
Blog, Posts and Category Filter for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13607
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-25110
Event Kikfyre <= 2.1.8 - Missing Authorization
Medium
CVE-2025-25097
External Video For Everybody <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25138
On Page SEO + Whatsapp Chat Button <= 2.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22645
Real Estate Manager – Property Listing and Agent Management <= 7.3 - CAPTCHA Bypass
High
CVE-2025-25093
Child Themes Helper <= 2.2.7 - Cross-Site Request Forgery to Arbitrary File Deletion
Medium
CVE-2025-22647
AIO Performance Profiler, Monitor, Optimize, Compress & Debug <= 1.2 - Missing Authorization
Medium
CVE-2024-11132
Eventer <= 3.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-22668
Awesome Event Booking <= 2.7.2 - Missing Authorization
Medium
CVE-2025-25085
WP SimpleWeather <= 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22680
Ad Inserter Pro <= 2.7.39 - Reflected Cross-Site Scripting
Medium
CVE-2024-11133
Eventer <= 3.9.9.5 - Missing Authorization to Unauthenticated Event Ticket Download
Medium
CVE-2024-12308
Logo Slider <= 4.5.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13605
Form Maker by 10Web <= 1.15.32 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.