High
CVE-2024-44055
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-24781
WPJobBoard <= 5.10.1 - Reflected Cross-Site Scripting
High
CVE-2024-13509
WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-23976
Issuu Panel <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-23985
Dynamic URL SEO <= 1.0 - Cross-Site Request Forgery
High
CVE-2025-24782
Post Grid, Slider & Carousel Ultimate <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-13448
ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data
Medium
CVE-2025-24680
WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy Maps <= 2.5.0 - Reflected Cross-Site Scripting
High
CVE-2024-13726
Themes Coder <= 1.3.4 - Unauthenticated SQL Injection
Medium
CVE-2025-23977
Post Carousel Slider <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13608
Track Logins <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2024-13603
Wise Forms <= 1.2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-23989
Internal Link Builder <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-23982
Fare Calculator <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13626
VR Frases <= 3.0.1 - Reflected Cross-Site Scripting
High
CVE-2025-24734
Better Find and Replace <= 1.6.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-13505
Survey Maker <= 5.1.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Survey Question
Medium
CVE-2024-12334
WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting
High
CVE-2024-10633
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content
High
CVE-2024-10574
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross-Site Scripting
High
CVE-2024-10628
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id
Medium
CVE-2024-10705
Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl
Medium
CVE-2024-11090
Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
High
CVE-2024-11641
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.