Medium
CVE-2025-2804
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 51
Reset filters
Medium
CVE-2024-8682
JNews - WordPress Newspaper Magazine Blog AMP Theme <= 11.6.6 - Unauthorized User Registration
Medium
CVE-2024-56258
Magazine Blocks <= 1.3.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50429
Magazine Blocks <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9218
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site Scripting
Medium
CVE-2024-4615
Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget
Medium
CVE-2024-3888
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
Medium
CVE-2024-34760
Magazine Blocks <= 1.3.6 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-3815
Newspaper <= 12.6.5 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
Medium
CVE-2023-4824
WooHoo Newspaper Magazine Theme <= 2.5.3 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2023-1597
tagDiv Cloud Library < 2.7 - Missing Authorization to Arbitrary User Metadata Update
Critical
CVE-2022-3477
tagDiv Composer < 3.5 - Unauthorized Account Access and Privilege Escalation
Medium
CVE-2022-2627
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-2167
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-24304
Newsmag < 5.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-3135
Newspaper Lite < 11.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24407
Jannah <= 5.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2021-24364
Jannah - Newspaper Magazine News BuddyPress AMP < 5.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2021-24342
JNews - WordPress Newspaper Magazine Blog AMP Theme < 8.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2020-36721
Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation
Critical
CVE-2020-36708
Epsilon Framework Themes (Various Versions) - Function Injection
Medium
CVE-2020-36510
15Zine | Magazine Newspaper Blog News WordPress Theme < 3.3.0 - Reflected Cross-Site Scripting
Medium
441f5764-eab6-40fe-80cd-65da327b39b2
Newspaper <= 10.3.3 - Reflected Cross-Site Scripting
Medium
31c6e07a-3a3a-4295-a86d-79b4ca1a331e
Newspaper < 9.2.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.