Medium
CVE-2024-10105
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-13686
VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Medium
CVE-2024-10565
Slider by 10Web <= 1.2.61 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget
High
CVE-2025-26875
Multiple Shipping And Billing Address For Woocommerce <= 1.3 - Unauthenticated SQL Injection
Medium
CVE-2024-12682
Smart Maintenance Mode <= 1.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13123
AFI – The Easiest Integration Plugin <= 1.99.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-0717
Social Slider Feed <= 2.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13730
Podlove Podcast Publisher <= 4.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12680
Prisna GWT – Google Website Translator <= 1.4.13 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10554
WordPress WP-Advanced-Search <= 3.3.9.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13616
VikBooking Hotel Booking Engine & PMS <= 1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-11718
tarteaucitron.js for WordPress < 0.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-1062
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9879
Melapress File Monitor <= 2.1.0 - Authenticated (Admin+) Authenticated SQL Injection
Medium
CVE-2025-0718
Nested Pages <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9227
PowerPress Podcasting <= 11.9.17 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-10145
Hubbub Lite <= 1.34.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-1203
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10558
Form Maker by 10Web <= 1.15.29 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13382
Calculated Fields Form <= 5.2.63 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10009
Melapress File Monitor <= 2.0.2 - Authenticated (Admin+) Authenticated SQL Injection
High
CVE-2025-26988
SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Unauthenticated SQL Injection
Medium
CVE-2023-2334
Easy Digital Downloads Google Sheet Connector <= 1.6.6 - Cross-Site Request Forgery to Access Code Update
Medium
CVE-2025-26553
Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin <= 2.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.