Medium
CVE-2024-13517
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-13492
Guten Free Options <= 0.9.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-13126
Download Manager <= 3.3.06 - Unauthenticated Information Disclosure via Unprotected Directory
Medium
CVE-2025-23727
AZ Content Finder <= 0.1 - Reflected Cross-Site Scripting
High
CVE-2025-23931
WordPress Local SEO <= 2.3 - Unauthenticated SQL Injection
Medium
CVE-2024-13519
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 1.9.80 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Medium
CVE-2024-13317
ShipWorks Connector for Woocommerce <= 5.2.5 - Cross-Site Request Forgery to Service Password/Username Update
Medium
CVE-2025-0515
Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Option Update
Low
3a3fa988-6f0b-48d3-a946-0fc587858c9c
WPSyncSheets Lite For Elementor – Elementor Pro Form Google Spreadsheet Addon <= 1.4 - Running Vulnerable Dependencies
Medium
CVE-2025-0554
Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name
Medium
CVE-2024-13352
Legull <= 1.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-23475
History timeline <= 0.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-13391
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-23995
Tantyyellow <= 1.0.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-12370
WP Hotel Booking <= 2.1.5 - Missing Authorization
Medium
CVE-2024-12466
Proofreading <= 1.2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-13367
Sandbox <= 0.4 - Missing Authorization to Authenticated (Subscriber+) Sandbox Download
Medium
CVE-2024-12508
Glofox Shortcodes <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12203
RSS Icon Widget <= 5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-12598
MyBookProgress by Stormhill Media <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via book Parameter
Medium
CVE-2024-13386
quote-posttype-plugin <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12637
Moving Users <= 1.05 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-23882
WP Download Codes <= 2.5.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-23585
Goo.gl Url Shorter <= 1.0.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.