Medium
CVE-2024-13426
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-13543
Zarinpal Paid Downloads <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12117
Stackable – Page Builder Gutenberg Blocks <= 3.13.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-0429
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms
High
CVE-2025-24671
Save as PDF Plugin by Pdfcrowd <= 4.4.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-22702
Photography <= 7.5.2 - Missing Authorization
Medium
CVE-2024-12879
WPBot Pro Wordpress Chatbot <= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response Creation
Medium
CVE-2024-13570
Stray Random Quotes <= 1.9.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-13319
Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting
High
CVE-2025-0428
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts
Medium
CVE-2025-24747
Houzez <= 3.4.1 - Missing Authorization
High
CVE-2024-13544
Zarinpal Paid Downloads <= 2.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-13360
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2024-12857
AdForest <= 5.1.8 - Authentication Bypass
Medium
CVE-2025-24670
Term Taxonomy Converter <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-13361
AI Power: Complete AI Pack <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Critical
CVE-2024-13091
WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-13584
Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13406
XML for Google Merchant Center <= 3.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2024-11226
FireCask Like & Share Button <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Medium
CVE-2024-13230
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14 - Unauthenticated Limited SQL Injection via 'SuperSocializerKey'
Medium
CVE-2025-0450
Betheme <= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
Medium
CVE-2024-13444
wp-greet <= 6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12005
WP-BibTeX <= 3.0.1 - Cross-Site Request Forgery to Stored and Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.