Medium
CVE-2025-22716
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-10775
Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2025-22773
Htaccess File Editor <= 1.0.19 - Unauthenticated Information Exposure
Medium
CVE-2024-13215
Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup
Medium
CVE-2025-0466
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.3 - Unauthenticated Information Exposure
Medium
CVE-2025-22762
WordPress HelpDesk & Support Ticket System Plugin – Octrace Support <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-11396
Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
High
CVE-2025-22785
Course Booking System <= 6.0.6 - Unauthenticated SQL Injection
Medium
CVE-2025-24651
WebToffee WP Backup and Migration <= 1.5.3 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-22799
Neon Product Designer <= 2.1.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-11915
RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-12116
Unlimited Theme Addon For Elementor and WooCommerce <= 1.2.2 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-12472
Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure
Medium
CVE-2024-12505
Trackserver <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12404
CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection
Medium
CVE-2024-11327
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12473
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12735
Advance Post Prefix <= 1.1.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-12067
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-5769
MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Limited Settings Update
High
CVE-2024-12330
WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposure
High
CVE-2024-12854
Garden Gnome Package <= 2.3.0 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2024-12584
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Medium
CVE-2025-22505
NC Wishlist for Woocommerce <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.