Medium
CVE-2025-22310
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-22302
WP Wand <= 1.2.5 - Missing Authorization
Medium
CVE-2024-12738
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-13052
Dental Optimizer Patient Generator App <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2024-12202
Croma Music <= 3.6 - Authenticated (Subscriber+) Arbitrary Options Update in ironMusic_ajax
Medium
CVE-2024-9354
Estatik Mortgage Calculator <= 2.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2025-22261
WP FullCalendar <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12807
Social Share Buttons for WordPress <= 2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12321
WC Affiliate <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22301
MyBookTable Bookstore <= 3.5.3 - Cross-Site Request Forgery
Medium
CVE-2024-12624
Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ
High
CVE-2024-11725
SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2025-22293
Gutentor <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12719
WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal
Medium
CVE-2025-22299
AI for SEO <= 1.2.9 - Missing Authorization
Medium
CVE-2024-11369
Store credit / Gift cards for woocommerce <= 1.0.49.46 - Reflected Cross-Site Scripting
Medium
CVE-2024-13117
Social Share Buttons for WordPress <= 2.7 - Missing Authorization to Unauthenticated Image Upload & Path Traversal
Medium
CVE-2025-22296
Hash Elements <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22316
WPBITS Addons For Elementor Page Builder <= 1.5.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-24639
Korea for WooCommerce <= 1.1.11 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-22308
Smart Custom Fields <= 5.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13056
Dyn Business Panel <= 1.0.0 - Reflected Cross-Site Scripting
High
CVE-2024-53800
Rezgo Online Booking <= 4.17 - Unauthenticated Local File Inclusion
Medium
CVE-2024-12280
WP Customer Area <= 8.2.4 - Cross-Site Request Forgery to Event Log Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.