Medium
CVE-2024-13470
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-13457
Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure
Medium
CVE-2024-12921
EthereumICO <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ethereum-ico Shortcode
Medium
CVE-2024-52500
Monetag Official Plugin <= 1.1.3 - Missing Authorization
Medium
CVE-2024-12409
Simple:Press Forum <= 6.10.11 - Reflected Cross-Site Scripting
Medium
CVE-2024-13664
WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8494
Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
Medium
CVE-2024-12861
W2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2024-13380
Alex Reservations: Smart Restaurant Booking <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-13642
Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget
Medium
CVE-2024-13549
All Bootstrap Blocks <= 1.3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13128
LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-13707
WP Image Uploader <= 1.0.1 - Cross-Site Request Forgery to Arbitrary File Deletion
High
CVE-2024-13720
WP Image Uploader <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2025-24692
Bulk Menu Edit <= 1.3.0 - Missing Authorization
Medium
CVE-2024-13700
Embed Swagger UI <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12173
Master Slider <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13127
LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13561
Target Video Easy Publish <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via brid_override_yt Shortcode
Medium
CVE-2025-0353
Divi Torque Lite <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
High
CVE-2024-13696
Flexible Wishlist for WooCommerce <= 1.2.25 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter
Medium
CVE-2025-24686
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-24688
WP Mailster <= 1.8.20.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24810
Simple Image Sizes <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.