Medium
CVE-2025-23768
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-13393
Video Share VOD – Turnkey Video Site Builder Script <= 2.6.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13392
Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13125
Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13516
Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-10483
Simple:Press Forum <= 6.10.10 - Reflected Cross-Site Scripting via msearch
Medium
CVE-2024-13515
Image Source Control Lite – Show Image Credits and Captions <= 2.28.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-12071
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-13385
JSM Screenshot Machine Shortcode <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13517
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Title
Medium
CVE-2024-13492
Guten Free Options <= 0.9.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-13126
Download Manager <= 3.3.06 - Unauthenticated Information Disclosure via Unprotected Directory
Medium
CVE-2025-23727
AZ Content Finder <= 0.1 - Reflected Cross-Site Scripting
High
CVE-2025-23931
WordPress Local SEO <= 2.3 - Unauthenticated SQL Injection
Medium
CVE-2024-13519
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 1.9.80 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Medium
CVE-2024-13317
ShipWorks Connector for Woocommerce <= 5.2.5 - Cross-Site Request Forgery to Service Password/Username Update
Medium
CVE-2025-0515
Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Option Update
Low
3a3fa988-6f0b-48d3-a946-0fc587858c9c
WPSyncSheets Lite For Elementor – Elementor Pro Form Google Spreadsheet Addon <= 1.4 - Running Vulnerable Dependencies
Medium
CVE-2025-0554
Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name
Medium
CVE-2024-13352
Legull <= 1.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-23475
History timeline <= 0.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-13391
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-23995
Tantyyellow <= 1.0.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-12370
WP Hotel Booking <= 2.1.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.