Medium
CVE-2025-26758
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2024-13488
LTL Freight Quotes – Estes Edition <= 3.3.7 - Unauthenticated SQL Injection
Medium
CVE-2025-26755
WP Airbnb Review Slider <= 3.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-0821
Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter
Medium
CVE-2024-13641
Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2025-26963
ClickWhale <= 2.4.3 - Cross-Site Request Forgery
Medium
CVE-2024-13868
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Reflected Cross-Site Scripting
High
CVE-2024-13606
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2025-22633
Give – Divi Donation Modules <= 2.0.0 - Sensitive Information Dislcosure
High
CVE-2025-22290
LTL Freight Quotes – FreightQuote Edition <= 2.3.11 - Unauthenticated SQL Injection
Medium
CVE-2025-0661
DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosure
High
CVE-2024-13532
Small Package Quotes – Purolator Edition <= 3.6.4 - Unauthenticated SQL Injection
High
CVE-2024-13477
LTL Freight Quotes – Unishippers Edition <= 2.5.8 - Unauthenticated SQL Injection
High
CVE-2024-12386
WP Abstracts <= 2.7.3 - Cross-Site Request Forgery to Arbitrary Account Deletion
High
CVE-2024-13531
ShipEngine Shipping Quotes <= 1.0.7 - Unauthenticated SQL Injection
High
CVE-2024-13435
Ebook Downloader <= 1.0 - Unauthenticated SQL Injection
High
CVE-2024-13473
LTL Freight Quotes - Worldwide Express Edition <= 5.0.20 - Unauthenticated SQL Injection
Critical
CVE-2024-13365
Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload
High
CVE-2024-13475
Small Package Quotes – UPS Edition <= 4.5.16 - Unauthenticated SQL Injection
High
CVE-2024-13600
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
High
CVE-2024-13480
LTL Freight Quotes – For Customers of FedEx Freight <= 3.4.1 - Unauthenticated SQL Injection
High
CVE-2024-13490
LTL Freight Quotes – XPO Edition <= 4.3.7 - Unauthenticated SQL Injection
High
CVE-2024-12315
Export All Posts, Products, Orders, Refunds & Users <= 2.9.3 - Information Disclosure Through Unprotected Directory
Medium
CVE-2024-13841
Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time <= 1.0.0 - Authenticated (Contributor+) Post Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.