High
CVE-2025-0394
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-13156
HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter
Medium
CVE-2025-0393
Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
High
CVE-2024-12365
W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery
Medium
CVE-2024-11396
Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
Medium
CVE-2025-22791
offset writing <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22795
Multilang Contact Form <= 1.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22794
World Cup Predictor <= 1.9.6 - Reflected Cross-Site Scripting
Critical
CVE-2024-12919
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id
Medium
CVE-2025-22788
CoDesigner WooCommerce Builder for Elementor <= 4.21 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-22792
Js O3 Lite <= 1.5.8.2 - Reflected Cross-Site Scripting
High
CVE-2025-22784
Background Control <= 1.0.5 - Cross-Site Request Forgery to Arbitrary File Deletion
High
CVE-2025-22785
Course Booking System <= 6.0.6 - Unauthenticated SQL Injection
Medium
CVE-2024-12008
W3 Total Cache <= 2.8.1 Information Exposure via Log Files
Medium
CVE-2025-22798
Responsive jQuery Slider <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-51800
Homey <= 2.4.1 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-22787
Button Block <= 1.1.5 - Missing Authorization
Medium
CVE-2025-22793
Bold pagos en linea <= 3.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-13347
Essential WP Real Estate <= 1.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-13323
Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode
Medium
CVE-2025-22796
WP-Asambleas <= 2.85.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-12006
W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation
Medium
CVE-2025-24651
WebToffee WP Backup and Migration <= 1.5.3 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-51888
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.