Medium
CVE-2025-22685
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2025-22701
Traveler Layout Essential For Elementor < 1.4 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-22696
Document Block – Upload & Embed Docs <= 1.1.0 - Missing Authorization
Medium
CVE-2025-22691
WP Travel <= 10.1.3 - Authenticated (Author+) SQL Injection
High
CVE-2025-22684
WP BASE Booking <= 5.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22703
Forge – Front-End Page Builder <= 1.4.6 - Cross-Site Request Forgery to Stored Cross-site Scripting
Medium
CVE-2025-22695
Nirweb support <= 3.0.3 - Missing Authorization
Medium
CVE-2024-13371
WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Medium
CVE-2024-13428
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion
Medium
CVE-2025-22704
WordPress Signature <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13425
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion
Medium
CVE-2025-22698
Accessibility Suite by Ability, Inc <= 4.18 - Missing Authorization
Medium
CVE-2024-13429
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion
Medium
CVE-2025-22260
Meta Tag Manager <= 3.1 - Missing Authorization
Medium
CVE-2025-22690
DigiTimber cPanel Integration <= 1.4.6 - Cross-Site Request Forgery to Stored Cross-site Scripting
Medium
CVE-2025-22705
Disqus Popular Posts <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-24707
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.24 - Reflected Cross-Site Scripting
Medium
CVE-2025-22686
CF7 Google Sheets Connector <= 5.0.17 - Missing Authorization
Medium
CVE-2024-50500
Shortcodes and extra features for Phlox theme <= 2.17.4 - Missing Authorization
Medium
CVE-2024-13341
MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.1.11 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-13651
RapidLoad – Optimize Web Vitals Automatically <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Limited Setting Reset
Medium
CVE-2024-13775
WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure
Medium
CVE-2024-13314
Carousel, Slider, Gallery by WP Carousel <= 2.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12184
WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.