Medium
CVE-2025-23850
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-23602
EELV Newsletter <= 4.8.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-23868
Chess Tempo Viewer <= 0.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-23676
LH Email <= 1.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-12427
Multi Step Form <= 1.7.23 - Missing Authorization to Unauthenticated Limited File Upload
High
CVE-2024-12613
Passwords Manager <= 1.4.8 - Unauthenticated SQL Injection
Medium
CVE-2024-10789
WP User Profile Avatar <= 1.0.5 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-10970
Motors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title
Medium
CVE-2025-0215
UpdraftPlus - Backup/Restore <= 1.24.12 - Reflected Cross-Site Scripting
Medium
CVE-2025-24655
Wishlist <= 1.0.39 - Reflected Cross-Site Scripting
Medium
CVE-2025-22661
Online Payments – Get Paid with PayPal, Square & Stripe <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22721
ApplyOnline – Application Form Builder and Manager <= 2.6.7.1 - Missing Authorization
Medium
CVE-2025-22732
Ad Blocking Detector <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-0170
DWT - Directory & Listing WordPress Theme <= 3.3.3 - Reflected Cross-Site Scripting
High
CVE-2025-22723
Barcode Scanner with Inventory & Order Manager <= 1.6.7 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-12615
Passwords Manager <= 1.4.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22711
Image Source Control <= 2.29.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22825
Flexible PDF Coupons <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22730
Ksher <= 1.1.2 - Missing Authorization
Medium
CVE-2025-22714
MDJM Event Management <= 1.7.5.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-22720
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress <= 2.2.1 - Missing Authorization
Medium
CVE-2025-22710
Smart Manager <= 8.52.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-22727
MailChimp Subscribe Forms <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12614
Passwords Manager <= 1.4.8 - Missing Authorization to Authenticated (Subscriber+) Add Password + Update Encryption Key
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.