Medium
CVE-2025-24721
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-24652
WP Duplicate – WordPress Migration Plugin <= 1.1.6 - Missing Authorization
Medium
CVE-2025-24610
Restrict Anonymous Access <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2025-24613
FV Thoughtful Comments <= 0.3.5 - Missing Authorization
Medium
CVE-2025-24673
Ketchup Shortcodes <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24757
uDesign <= 4.11.2 - Missing Authorization
Medium
CVE-2025-24568
Starter Templates <= 4.4.9 - Cross-Site Request Forgery
Medium
CVE-2025-24743
RomethemeKit For Elementor <= 1.5.2 - Missing Authorization
High
CVE-2024-13409
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()
Medium
CVE-2026-15296
affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12494
BMLT Meeting Map <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-13545
Bootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File Inclusion
Medium
CVE-2024-13683
Automate Hub Free by Sperse.IO <= 1.7.0 - Cross-Site Request Forgery to Activation Status Update
High
CVE-2024-13408
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-13119
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13121
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10324
RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-13354
Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13120
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13680
Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12770
WP ULike <= 4.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-12586
Chalet-Montagne.com Tools <= 2.7.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-11913
Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Medium
CVE-2024-13659
Listamester <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.