High
CVE-2024-56281
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-56276
Contact Form by WPForms <= 1.9.2.2 - Missing Authorization
Medium
CVE-2024-56056
SimpleCharm <= 1.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22326
5centsCDN <= 25.4.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-56294
Nexter Blocks <= 4.0.7 - Missing Authorization
Medium
CVE-2025-22338
WP-tagMaker <= 0.2.2 - Reflected Cross-Site Scripting
Critical
CVE-2024-12583
Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection
Medium
CVE-2025-22362
WPAchievements Free <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12195
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-56279
Compact WP Audio Player <= 1.9.14 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-22320
ProductDyno <= 1.0.24 - Reflected Cross-Site Scripting
Medium
CVE-2024-56275
Envato Elements <= 2.0.14 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2025-22352
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2024-49333
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-49300
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22321
ElementsCSS Addons for Elementor <= 1.0.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22336
Wizhi Multi Filters by Wenprise <= 1.8.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-56272
Hide Category by User Role for WooCommerce <= 2.1.1 - Missing Authorization
Medium
CVE-2025-22330
MG Parallax Slider <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22354
Digi Store <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22348
DynamicTags <= 1.4.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22322
Private Messages for UserPro <= 4.10.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56278
WP Ultimate Exporter <= 2.9.1 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2025-22344
Media Category Library <= 2.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.