Medium
CVE-2026-1867
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 12
Reset filters
Medium
CVE-2025-13419
Guest posting / Frontend Posting / Front Editor – WP Front User Submit <= 5.0.0 - Missing Authorization to Unauthenticated Media Deletion
Medium
CVE-2025-12569
Front User Submit <= 4.9.5 - Open Redirect
Medium
CVE-2025-28988
WP Front User Submit / Front Editor <= 4.9.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-52795
WP Front User Submit / Front Editor <= 4.9.4 - Cross-Site Request Forgery
Medium
CVE-2025-47617
WP Front User Submit / Front Editor <= 4.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-2967
Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor <= 4.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-1982
Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor <= 4.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
5bc03b4a-f7ec-4827-b914-0560b9268b6f
Front User Submit | Front Editor <= 3.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
f34722fb-e852-4194-b839-7d885d212fc9
Front User Submit | Front Editor <= 3.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.