Medium
CVE-2025-23632
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Medium
CVE-2024-6857
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Header/Footer/Body Script Update
Medium
CVE-2025-1802
HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2025-23705
Zielke Design Project Gallery <= 2.5.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23633
WP Database Audit <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-8243
WordPress/Plugin Upgrade Time Out Plugin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-23680
Narnoo Operator <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23666
Management-screen-droptiles <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23704
Your Lightbox <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23608
LIVE TV <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-2108
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widget
Critical
CVE-2025-2512
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated File Upload via upload Function
Medium
CVE-2025-2511
AHAthat Plugin <= 1.6 - Authenticated (Administrator+) SQL Injection via id Parameter
High
CVE-2025-29907
jsPDF Bypass Regular Expression Denial of Service (ReDoS)
Medium
CVE-2025-29790
Contao Vulnerable to Cross-Site Scripting (XSS) through SVG uploads
High
CVE-2024-44313
TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function
Medium
CVE-2024-44314
TastyIgniter Has an Incorrect Access Control Vulnerability
Medium
CVE-2025-22566
ULTIMATE VIDEO GALLERY <= 1.4 - Reflected Cross-Site Scripting
Medium
f5b21bbe-32d9-4054-99ff-8f272556eda9
Snow Storm <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-12922
Altair <= 5.2.4 - Unauthenticated Arbitrary Options Update via pp_import_current
High
CVE-2024-12563
s2Member Pro <= 250214 - Authenticated (Contributor+) Local File Inclusion to Remote Code Execution via Shortcode
Medium
CVE-2025-23550
Product Puller <= 1.5.1 - Reflected Cross-Site Scripting
High
CVE-2024-12295
BoomBox Theme Extensions <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password
Medium
CVE-2025-22356
Stencies <= 0.58 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.