Medium
CVE-2025-24361
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-24360
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
Medium
CVE-2024-52012
Apache Solr Relative Path Traversal vulnerability
High
CVE-2025-24814
Apache Solr vulnerable to Execution with Unnecessary Privileges
Medium
CVE-2025-24708
WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-23987
Designer <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-24685
Morkva UA Shipping <= 1.0.18 - Unauthenticated Local File Inclusion
Medium
CVE-2024-44044
Oshine Modules <= 3.3.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-13625
Tube Video Ads Lite <= 1.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-24689
Import and export users and customers <= 1.27.12 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-23990
Scroll Styler <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13627
WP Touch Slider <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-13527
Philantro – Donations and Donor Management <= 5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via donate Shortcode
Medium
CVE-2025-24684
Media Downloader <= 0.4.7.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-23980
Full Circle <= 0.5.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-11135
Eventer <= 3.9.8 - Unauthenticated SQL Injection via eventer_get_attendees
Medium
CVE-2025-23978
FlashCounter <= 1.1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-44055
Oshine Modules < 3.3.8 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-24781
WPJobBoard <= 5.10.1 - Reflected Cross-Site Scripting
High
CVE-2024-13509
WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-23976
Issuu Panel <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-23985
Dynamic URL SEO <= 1.0 - Cross-Site Request Forgery
High
CVE-2025-24782
Post Grid, Slider & Carousel Ultimate <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-13448
ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.