Medium
CVE-2024-13829
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-25128
Facilita Form Tracker <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22639
Distance Rate Shipping For WooCommerce <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-25145
Infusionsoft Analytics <= 2.0 - Cross-Site Request Forgery
High
CVE-2025-22655
CWD – Stealth Links <= 1.3 - Unauthenticated SQL Injection
Medium
CVE-2024-13514
B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode
Medium
CVE-2025-25151
uListing <= 2.1.6 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-25116
Link to URL / Post <= 1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-22649
WP Project Manager <= 2.6.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22652
Payment Forms for Paystack <= 4.0.1 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-25150
uListing <= 2.1.6 - Unauthenticated SQL Injection
High
CVE-2025-22699
Traveler Code <= 3.1.1 - Unauthenticated Arbitrary SQL Injection
Medium
CVE-2025-22691
WP Travel <= 10.1.3 - Authenticated (Author+) SQL Injection
Medium
CVE-2024-13341
MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.1.11 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22700
Traveler Code <= 3.1.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22693
Contest Gallery <= 25.1.0 - Authenticated (Author+) SQL Injection
Medium
CVE-2024-12041
Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure
Medium
CVE-2024-13216
HT Event – WordPress Event Manager Plugin for Elementor <= 1.4.7 - Authenticated (Contributor+) Sensitive Information Exposure via HT Event: Sponsor
Medium
CVE-2024-13596
WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress <= 1.7.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12102
Typer Core <= 1.9.6 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-13623
Order Export for WooCommerce <= 3.24 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
High
CVE-2024-13507
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injection
Medium
CVE-2025-0861
VR-Frases (collect & share quotes) <= 3.0.1 - Authenticated (Admin+) SQL Injection
High
CVE-2024-13694
WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.