Medium
CVE-2024-9645
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-13115
WP Projects Portfolio with Client Testimonials <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13325
Glossy <= 2.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22743
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10326
RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets
Medium
CVE-2025-22747
Foundation Columns <= 0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22780
wp-pano <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11848
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Medium
CVE-2025-22729
VOD Infomaniak <= 1.5.9 - Missing Authorization
Medium
CVE-2025-22755
WP Headmaster <= 0.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22761
Ajax Contact Form <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22762
WordPress HelpDesk & Support Ticket System Plugin – Octrace Support <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22775
Catalog Importer, Scraper & Crawler <= 5.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22778
Lijit Search <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12240
Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter
High
CVE-2025-0394
Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function
Medium
CVE-2024-13156
HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter
Medium
CVE-2025-0393
Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
High
CVE-2024-12365
W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery
Medium
CVE-2024-11396
Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
Medium
CVE-2025-22791
offset writing <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22795
Multilang Contact Form <= 1.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22794
World Cup Predictor <= 1.9.6 - Reflected Cross-Site Scripting
Critical
CVE-2024-12919
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.