Medium
CVE-2025-25133
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-25127
Contact Us By Lord Linus <= 2.6 - Reflected Cross-Site Scripting
Critical
CVE-2025-25141
Fami Sales Popup <= 2.0.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-25102
Yahoo BOSS <= 0.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-25157
WP Church Center <= 1.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-25129
Callback Request <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-25164
Meta Accelerator <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-25119
Woocommerce osCommerce Sync <= 2.0.20 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-25158
Uncomplicated SEO <= 1.2 - Reflected Cross-Site Scripting
Critical
CVE-2025-25109
WP Vehicle Manager <= 3.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-24700
WP Event Aggregator <= 1.8.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-0939
MagicForm - WordPress Form Builder <= 1.6.2 - Missing Authorization
Medium
CVE-2024-12620
AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations <= 1.4.23 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-22694
Hide Shipping Method For WooCommerce <= 1.5.1 - Missing Authorization
Medium
CVE-2024-11829
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24718
WP Sessions Time Monitoring Full Automatic <= 1.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-13372
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download
Medium
CVE-2025-22689
Forex Calculators <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-0365
Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read
Medium
CVE-2025-23975
Botnet Attack Blocker <= 2.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-12171
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-22688
Unlimited Page Sidebars <= 0.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-22699
Traveler Code <= 3.1.1 - Unauthenticated Arbitrary SQL Injection
Medium
CVE-2025-24710
Gwolle Guestbook <= 4.7.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.