Medium
CVE-2024-12046
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-25147
Auto SEO <= 2.5.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22671
Disable Elementor Editor Translation <= 1.0.2 - Missing Authorization
Medium
CVE-2025-25145
Infusionsoft Analytics <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2024-13529
SocialV - Social Network and Community BuddyPress Theme <= 2.0.15 - Missing Authorization to Arbitrary File Download
High
CVE-2025-22677
Uix Shortcodes <= 2.0.3 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-25160
Style Tweaker <= 0.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25099
Appointment Buddy Widget <= 1.2 - Reflected Cross-Site Scripting
High
CVE-2024-12859
BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2025-25080
Kona Gallery Block <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25104
URL-Preview-Box <= 1.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25088
WP Keyword Monitor <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25094
Breaking News Ticker <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25076
Graceful Email Obfuscation <= 0.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25143
GlobalQuran <= 1.0 - Cross-Site Request Forgery to Settings Update
High
CVE-2025-22655
CWD – Stealth Links <= 1.3 - Unauthenticated SQL Injection
Medium
CVE-2025-25168
BookPress – For Book Authors <= 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25096
RSS in Page <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13514
B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode
Medium
CVE-2024-13699
Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22664
Survey Maker <= 5.1.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-25135
Custom Links On Admin Dashboard Toolbar <= 3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25144
Theasys <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22679
Job Board Manager <= 2.1.60 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.