Medium
CVE-2025-22749
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-22776
WP Bulletin Board <= 1.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12818
WP Smart TV <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2025-22770
Envo Multipurpose <= 1.1.6 - Missing Authorization
Medium
CVE-2025-22744
S-DEV SEO <= 1.88 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22753
turboSMTP <= 4.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-22768
Rocket Media Library Mime Type <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-24642
Setup Default Featured Image <= 1.2 - Missing Authorization
Medium
CVE-2025-22738
WP ULike <= 4.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13327
Musicbox <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12403
Image Gallery – Responsive Photo Gallery <= 1.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-13330
JustRows free <= 0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22754
Amber <= 1.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-22759
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13328
Giga Messenger – Express <= 2.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-22752
GSheetConnector for Forminator Forms <= 1.0.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-13332
TransFinanz <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-13326
iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting
High
CVE-2025-22736
User Management <= 1.1 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-12767
BuddyBoss Platform < 2.7.60 - Insecure Direct Object Reference to Private Post Comment Exposure
Medium
CVE-2025-22737
WpTravelly <= 1.8.5 - Missing Authorization
Medium
CVE-2025-22766
Zarinpal Paid Download <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12423
Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-11851
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.