Medium
CVE-2024-12339
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-13679
Widget BUY.BOX <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13676
Categorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-11778
CanadaHelps Embedded Donation <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13674
Cosmic Blocks (40+) Content Editor Blocks Collection <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13462
WP Wiki Tooltip <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13736
Pure Chat – Live Chat & More! <= 2.4 - Reflected Cross-Site Scripting via purechatWidgetName Parameter
Low
CVE-2024-4028
Keycloak allows cross-site scripting (XSS)
High
CVE-2024-11582
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter
Medium
CVE-2024-13443
Easypromos Plugin <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-13508
Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameter
Medium
CVE-2024-13743
Wonder Video Embed <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2025-27015
Hostiko - Hosting WordPress & WHMCS Theme < 30.1 - Unauthenticated Local File Inclusion
High
CVE-2024-13533
Small Package Quotes – USPS Edition <= 1.3.5 - Unauthenticated SQL Injection
High
CVE-2024-13483
LTL Freight Quotes – SAIA Edition <= 2.2.10 - Unauthenticated SQL Injection
Medium
CVE-2025-27000
Simple Photo Feed <= 1.4.0 - Missing Authorization
Medium
CVE-2024-13615
Social Media Plugin by Social Snap <= 1.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-13491
Small Package Quotes – For Customers of FedEx <= 4.3.1 - Unauthenticated SQL Injection
High
CVE-2024-13481
LTL Freight Quotes – R+L Carriers Edition <= 3.3.4 - Unauthenticated SQL Injection
Medium
CVE-2024-13853
SEO Tools <= 4.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-13836
WP Login Control <= 2.0.0 - Reflected Cross-Site Scripting
High
CVE-2024-13485
LTL Freight Quotes – ABF Freight Edition <= 3.3.7 - Unauthenticated SQL Injection
Medium
CVE-2024-13574
XV Random Quotes <= 1.40 - Reflected Cross-Site Scripting
Medium
CVE-2024-13580
XV Random Quotes <= 1.40 - Cross-Site Request Forgery to Settings Reset
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.