Medium
CVE-2024-13883
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-13818
Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction <= 3.8.4 - Sensitive Information Exposure via Log Files
Medium
CVE-2024-13672
Mini Course Generator | Embed mini-courses and interactive content <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-0868
DocsGPT Allows Remote Code Execution
Medium
CVE-2025-23020
Kwik hash collision vulnerability
Medium
CVE-2025-1486
WoWPth <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-1401
WP Click Info <= 2.7.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12452
Ziggeo <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1436
Limit Bio <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13455
igumbi Online Booking <= 1.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1288
WOOEXIM – WooCommerce Export Import Plugin <= 5.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-13648
Maps for WP <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1487
WoWPth <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-13885
WP e-Customers Beta <= 0.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-13884
Limit Bio <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-13891
Schedule <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-13461
Autoship Cloud for WooCommerce Subscription Products <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6432
Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter
Medium
CVE-2024-13748
Ultimate Classified Listings <= 1.4 Authenticated (Administrator+) Stored Cross-Site Scripting via Title Parameter
High
CVE-2024-13753
Ultimate Classified Listings <= 1.5 - Cross-Site Request Forgery to Account Takeover
Medium
CVE-2024-13520
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.9 - Missing Authorization to Unauthenticated Price, Date, and Note Updates
Medium
CVE-2024-13802
Bandsintown Events <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13849
Cookie Notice Bar <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-0866
Legoeso PDF Manager <= 1.2.2 - Authenticated (Author+) SQL Injection via checkedVals Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.