High
CVE-2025-24416
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2025-24415
Magento Stored Cross-Site Scripting (XSS) Vulnerability
High
CVE-2025-24414
Magento Stored Cross-Site Scripting (XSS) Vulnerability
High
CVE-2025-24413
Magento Stored Cross-Site Scripting (XSS) Vulnerability
High
CVE-2025-24412
Magento Stored Cross-Site Scripting (XSS) Vulnerability
High
CVE-2025-24411
Magento Improper Access Control vulnerability
High
CVE-2025-24410
Magento Stored Cross-Site Scripting (XSS) Vulnerability
Medium
CVE-2025-24408
Magento Information Exposure vulnerability
Medium
CVE-2024-52067
Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Medium
CVE-2024-13554
The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation
High
CVE-2025-24876
Authentication bypass in @sap/approuter
High
CVE-2024-13654
ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion
High
CVE-2025-22630
Widget Options <= 4.1.0 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2024-13656
Click Mag - Viral WordPress News Magazine/Blog Theme <= 3.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion
Medium
CVE-2024-13601
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2024-12296
Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options
Medium
CVE-2025-22634
Easy Booked – Appointment Booking and Scheduling Management System for WordPress <= 2.4.5 - Cross-Site Request Forgery
Medium
CVE-2024-13658
NGG Smart Image Search <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13541
aDirectory – WordPress Directory Listing Plugin <= 2.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
High
CVE-2024-13475
Small Package Quotes – UPS Edition <= 4.5.16 - Unauthenticated SQL Injection
High
CVE-2024-13600
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2024-13701
Liveticker (by stklcode) <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22629
iNET Webkit <= 1.2.2 - Missing Authorization
Medium
CVE-2024-13665
Admire Extra <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.