Medium
CVE-2024-12173
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-13127
LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13561
Target Video Easy Publish <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via brid_override_yt Shortcode
Medium
CVE-2025-0353
Divi Torque Lite <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
High
CVE-2024-13696
Flexible Wishlist for WooCommerce <= 1.2.25 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter
Medium
CVE-2025-24686
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-24688
WP Mailster <= 1.8.20.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24810
Simple Image Sizes <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-0804
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-0321
ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
Medium
CVE-2024-13521
MailUp Auto Subscription <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-24708
WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-23987
Designer <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-24685
Morkva UA Shipping <= 1.0.18 - Unauthenticated Local File Inclusion
Medium
CVE-2024-44044
Oshine Modules <= 3.3.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-13625
Tube Video Ads Lite <= 1.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-24689
Import and export users and customers <= 1.27.12 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-23990
Scroll Styler <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13627
WP Touch Slider <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-13527
Philantro – Donations and Donor Management <= 5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via donate Shortcode
Medium
CVE-2025-24684
Media Downloader <= 0.4.7.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-23980
Full Circle <= 0.5.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-11135
Eventer <= 3.9.8 - Unauthenticated SQL Injection via eventer_get_attendees
Medium
CVE-2025-23978
FlashCounter <= 1.1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.