Medium
CVE-2025-24748
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-24750
ExactMetrics <= 8.1.0 - Missing Authorization
Medium
CVE-2025-24561
ReviewsTap <= 1.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-24589
JSM Show Post Metadata <= 4.6.0 - Missing Authorization
Medium
CVE-2025-24687
Show/Hide Shortcode <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24588
Patreon WordPress <= 1.9.1 - Missing Authorization
Medium
CVE-2025-24726
HT Conctact Form 7 <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-24650
Tourfic <= 2.15.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-24595
All Embed – Elementor Addons <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24715
Counter Box <= 2.0.5 - Cross-Site Request Forgery
Medium
CVE-2025-24746
Popup Maker <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13551
ABC Notation <= 6.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24693
Advanced Notifications <= 1.2.7 - Missing Authorization
Medium
CVE-2024-13493
Sensly Online Presence <= 0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-24712
Radius Blocks <= 2.1.2 - Cross-Site Request Forgery
Medium
CVE-2025-24578
ElementInvader Addons for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-13562
Import WP – Export and Import CSV and XML files to WordPress <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2025-24580
12 Step Meeting List <= 3.16.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion
Medium
CVE-2025-24756
Roi Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-24755
PDF Invoices for WooCommerce + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24744
Bridge Core <= 3.3 - Missing Authorization
Medium
CVE-2025-24562
KBucket <= 4.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-24579
Nested Pages <= 3.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24627
Blur Text <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.