High
CVE-2024-38985
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2024-13557
Shortcodes by United Themes <= 5.1.6 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2025-2803
So-Called Air Quotes <= 0.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-2840
DAP to Autoresponders Email Syncing <= 1.0 - Unauthenticated Information Exposure
Critical
CVE-2025-2266
Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update
High
CVE-2025-2006
Inline Image Upload for BBPress <= 1.1.19 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-2249
SoJ Soundslides <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2025-31447
NertWorks All in One Social Share Tools <= 1.26 - Cross-Site Request Forgery
Medium
CVE-2025-31460
OmniLeads Scripts and Tags Manager <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31465
Better Section Navigation Widget <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31456
Ultimate Security Checker <= 4.2 - Cross-Site Request Forgery
Medium
CVE-2025-31473
WP Database Optimizer <= 1.2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31444
ShowTime Slideshow <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31438
WP Supersized <= 3.1.6 - Cross-Site Request Forgery
High
CVE-2025-31432
Pop-Up Chop Chop <= 2.1.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-31464
Text Selection Color <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31088
Paid Member Subscriptions <= 2.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13926
WP-Syntax <= 1.2 - Authenticated (Author+) Regex Denial of Service
Medium
CVE-2025-31470
Page Takeover <= 1.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31083
Leaky Paywall <= 4.21.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31099
Slider by BestWebSoft <= 1.1.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-31448
Simple Trackback Disabler <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2025-31459
Login Alert <= 0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-30559
Kento WordPress Stats <= 1.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.