Critical
CVE-2025-22654
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-22339
Store Commerce <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56292
Email Reminders <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-49688
ARPrice <= 4.1.3 - Unauthenticated PHP Object Injection
Medium
CVE-2025-22355
Kikx Simple Post Author Filter <= 1.0 - Reflected Cross-Site Scripting
Critical
CVE-2024-56291
PlainInventory <= 3.1.6 - Unauthenticated PHP Object Injection
Medium
CVE-2025-22347
BSK Forms Blacklist <= 3.9 - Cross-Site Request Forgery
Medium
CVE-2025-22337
Order Audit Log for WooCommerce <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22329
Free Google Maps <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2024-56283
Locatoraid Store Locator <= 3.9.50 - Unauthenticated PHP Object Injection
Medium
CVE-2025-22333
Piotnet Addons For Elementor <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22363
Allada T-shirt Designer for Woocommerce <= 1.1 - Missing Authorization
Medium
CVE-2025-22361
Opentracker Analytics <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22340
Data Dash <= 1.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-22317
Gallery Images Ape <= 2.2.8 - Reflected Cross-Site Scripting
High
CVE-2024-49655
ARPrice <= 4.1.3 - Unauthenticated SQL Injection
Medium
CVE-2024-56274
Astra Widgets <= 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22324
OZ Canonical <= 0.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-49222
WPGuppy <= 1.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-22359
SyncFields < 4.1 - Reflected Cross-Site Scripting
Critical
CVE-2025-22311
Private Messages for UserPro <= 4.10.0 - Unauthenticated Local File Inclusion
Medium
CVE-2024-56271
WP SecureSubmit <= 1.5.18 - Missing Authorization
Medium
CVE-2025-22323
Image Hover Effects for Elementor <= 1.0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-56290
Multiple Shipping And Billing Address For Woocommerce <= 1.2 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.