Medium
CVE-2025-12015
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filters
Medium
CVE-2024-2232
Himer - Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites
Medium
CVE-2024-2040
Himer <= 2.1.0 - Cross-Site Request Forgery to Private Group Join
Medium
CVE-2024-2235
Himer <= 2.1.0 - Cross-Site Request Forgery to Poll Voting
Medium
CVE-2024-2233
Himer <= 2.1.0 - Cross-Site Request Forgery to Group Leave
Medium
CVE-2024-2375
WPQA - Builder forms Addon For WordPress plugin <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2231
Himer - Social Questions and Answers <= 2.1.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-2376
WPQA Builder <= 6.1.0 - Cross-Site Request Forgery
Medium
CVE-2022-3343
WPQA - Builder forms Addon For WordPress (<= 5.9.2), Himer (<= 1.9.3) and Discy (<= 5.5.3) - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2022-3688
WPQA < 5.9 - Cross-Site Request Forgery
Medium
CVE-2022-2198
WPQA - Builder forms Addon For WordPress < 5.7 - Information Disclosure
Medium
CVE-2022-1597
WPQA - Builder forms Addon For WordPress <= 5.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-1598
WPQA - Builder forms Addon For WordPress <= 5.4 - Unauthenticated Private Message Disclosure
Medium
CVE-2022-1349
WPQA - Builder forms Addon For WordPress < 5.2 - Insecure Direct Object Reference to Profile Picture Deletion
Medium
CVE-2022-1425
WPQA - Builder forms Addon For WordPress < 5.2 - Insecure Direct Object Reference to Private Message Disclosure
Medium
CVE-2022-1051
WPQA - Builder forms Addon For WordPress < 5.2 - Stored Cross-Site Scripting via Profile fields
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.