Medium
CVE-2024-13357
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
High
CVE-2024-9658
School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation
Medium
CVE-2024-12609
School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'
Medium
CVE-2025-0748
Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification
Medium
CVE-2024-12610
School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-13904
Platform.ly for WooCommerce <= 1.1.6 - Unauthenticated Blind Server-Side Request Forgery
Medium
CVE-2024-12743
MailPoet <= 5.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13313
AWeber <= 7.3.20 - Authenticated (Admin+) Stored Cross-Site Scripting
High
8b11a4ce-9e11-4c4b-8c61-3de05750f568
Solace Extra <= 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-13906
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2024-13320
CURCY - WooCommerce Multi Currency - Currency Switcher <= 2.3.6 - Unauthenticated SQL Injection
High
CVE-2025-1309
UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2024-12036
CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2024-12800
IP Based Login <= 2.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12611
School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting
High
CVE-2024-12035
CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2024-13655
Flex Mag - Responsive WordPress News Theme <= 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion
Medium
CVE-2025-0863
Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12809
Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12607
School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task'
Medium
CVE-2024-13805
Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2025-0749
Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check
Critical
CVE-2025-1475
WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone'
High
CVE-2025-27508
Emissary May Use a Broken or Risky Cryptographic Algorithm
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.