Medium
CVE-2024-13355
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-22709
Verge3D <= 4.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22719
VikAppointments Services Booking Calendar <= 1.2.16 - Cross-Site Request Forgery
Medium
CVE-2024-11452
Chamber Dashboard Business Directory <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22717
My Tickets <= 2.0.9 - Missing Authorization
Medium
CVE-2025-22716
Taskbuilder <= 3.0.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22706
Social Pug: Author Box <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-13387
WP Responsive Tabs <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24676
Custom WP Store Locator <= 1.4.7 - Reflected Cross-Site SCripting
Medium
CVE-2025-22733
My auctions allegro <= 3.6.18 - Reflected Cross-Site Scripting
Medium
CVE-2025-24564
Contact Form With Shortcode <= 4.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22718
FAT Event Lite <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24656
Realtyna Provisioning <= 1.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-12593
PDF for WPForms + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yeepdf_dotab Shortcode
Critical
CVE-2024-9636
Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation
High
CVE-2024-13351
Social proof testimonials and reviews by Repuso <= 5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10775
Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11870
Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13394
ViewMedica 9 <= 1.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13334
Car Demon <= 1.8.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-13331
WP Dream Carousel <= 1.0.1b - Reflected Cross-Site Scripting
Medium
CVE-2024-13114
WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22760
CodeBard Help Desk <= 1.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22745
Navigation Du Lapin Blanc <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.