Medium
CVE-2025-24672
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-24594
Linet ERP-Woocommerce Integration <= 3.5.7 - Cross-Site Request Forgery
Medium
CVE-2025-24751
CoBlocks <= 3.1.13 - Missing Authorization
Medium
CVE-2025-24634
Orbisius Simple Notice <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24725
Thim Elementor Kit <= 1.2.8 - Missing Authorization
Medium
CVE-2025-24662
LearnDash LMS <= 4.20.0.1 - Missing Authorization
Medium
CVE-2025-24669
SERPed.net <= 4.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-24738
Call Now Button <= 1.4.13 - Cross-Site Request Forgery
Medium
CVE-2025-24753
Gutenberg Blocks by Kadence Blocks <= 3.3.1 - Missing Authorization
Medium
CVE-2025-24731
Download IP2Location Country Blocker <= 2.38.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24711
Popup Box <= 3.2.4 - Cross-Site Request Forgery
Medium
CVE-2025-24698
Essential Real Estate <= 5.1.8 - Cross-Site Request Forgery
Medium
CVE-2025-24596
WooCommerce Product Table Lite <= 3.8.7 - Missing Authorization
Medium
CVE-2025-24704
Magic the Gathering Card Tooltips <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24709
Plethora Plugins Tabs + Accordions <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13208
Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 - Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Markers
Medium
CVE-2025-24679
Internal Links Manager <= 2.5.2 - Missing Authorization
Medium
CVE-2025-24603
Print Barcode Labels for your WooCommerce products/orders <= 3.4.10 - Missing Authorization
Medium
CVE-2025-24633
Build Private Store For Woocommerce <= 1.0 - Missing Authorization
Medium
CVE-2025-24678
Listamester <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-23991
Product Size Charts Plugin for WooCommerce <= 2.4.5 - Missing Authorization
Medium
CVE-2025-24611
WP Ultimate Exporter <= 2.9 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2025-24681
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.10.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-24720
Sticky Buttons <= 4.1.1 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.