High
CVE-2026-88824
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
High
CVE-2025-10896
Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload
Medium
CVE-2025-49929
Ultimate Blocks <= 3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-2918
Ultimate Blocks – WordPress Blocks Plugin <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2025-48234
Ultimate Blocks <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47493
Ultimate Blocks <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31077
Ultimate Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1703
Ultimate Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter
Medium
CVE-2025-1312
Ultimate Blocks – WordPress Blocks Plugin <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10678
Ultimate Blocks <= 3.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8536
Ultimate Blocks <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4268
Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks
Medium
CVE-2024-3513
Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute
Medium
CVE-2024-4655
Ultimate Blocks – WordPress Blocks Plugin <= 3.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6692
Ultimate Blocks – WordPress Blocks Plugin <= 3.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox
Medium
CVE-2024-3241
Ultimate Blocks <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.