Medium
CVE-2025-12628
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filters
Medium
CVE-2023-6272
Theme My Login 2FA < 1.2 - 2FA Bypass via Brute Force
High
cb105ff0-5085-4813-81a6-b1f0798d576c
MainWP (Various extensions) - Cross-Site Request Forgery
Medium
CVE-2023-22699
MainWP Wordfence Extension <= 4.0.7 - Missing Authorization to Arbitrary Plugin Activation
Medium
CVE-2023-23669
MainWP Wordfence Extension <= 4.0.7 - Missing Authorization to Plugin Settings Change
Medium
CVE-2022-3132
Goolytics – Simple Google Analytics <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3144
Wordfence Security – Firewall & Malware Scan <= 7.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
d0a81d60-d489-4786-aa21-805a1e2aa198
Ad Inserter Pro <= 2.7.15 - Arbitrary File Modification
Critical
CVE-2020-10257
ThemeREX Addons (Various Versions) - Missing Authorization
Medium
e7819dbf-fbcc-4dca-8300-b75ec096c541
Wordfence Security – Firewall & Malware Scan <= 7.1.13 - Reflected Cross-Site Scripting and Information Disclosure
High
e8fe4aa7-13e6-48ec-afec-2888edd999f5
WP Fastest Cache <= 0.8.5.9 - Local File Inclusion
Medium
809d0632-39a7-44a7-b368-9dc58270c666
Wordfence Security – Firewall & Malware Scan 6.1.1 - 6.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2014-4932
Wordfence <= 5.1.4 - Reflected Cross-Site Scripting
High
47938357-7d51-4d62-a08c-4b2bf3f3a062
Wordfence Security <= 5.2.3 - Stored Cross-Site Scripting via HTTP_HOST
High
fdfa2336-dda2-4945-9278-1a85f8b5f88b
Wordfence <= 5.2.3 - Stored Cross-Site Scripting via REQUEST_URI
Medium
be700f83-248f-4d22-b53d-7cc61e1f7d7d
Wordfence <= 5.2.3 - Multiple Protection Mechanism Bypasses
High
f315fff8-d616-4a5c-91bc-d8b0ec0f028f
Wordfence <= 5.2.2 - Stored Cross-Site Scripting
High
63a2d09d-9cb8-47ba-8e40-5b43894552e3
Wordfence Security <= 3.8.1 - Stored Cross-Site Scripting
High
CVE-2014-4664
Wordfence Security – Firewall & Malware Scan <= 5.1.3 - Cross-Site Scripting
Medium
bdc39e21-f39c-4581-895a-04e352e9b383
Wordfence < 3.3.7 - Reflected Cross-Site Scripting
Medium
93f9862f-745f-44d5-ac49-f8d2d19b35ed
Wordfence Security - Firewall & Malware Scan <= 3.3.6 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.