Medium
CVE-2024-13570
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-13319
Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting
High
CVE-2025-0428
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts
Medium
CVE-2025-24747
Houzez <= 3.4.1 - Missing Authorization
High
CVE-2024-13544
Zarinpal Paid Downloads <= 2.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-13360
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2024-12857
AdForest <= 5.1.8 - Authentication Bypass
Medium
CVE-2025-24670
Term Taxonomy Converter <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-13361
AI Power: Complete AI Pack <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Critical
CVE-2024-13091
WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-13584
Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13406
XML for Google Merchant Center <= 3.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2024-11226
FireCask Like & Share Button <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Medium
CVE-2024-13230
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14 - Unauthenticated Limited SQL Injection via 'SuperSocializerKey'
Medium
CVE-2025-0450
Betheme <= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
Medium
CVE-2024-13444
wp-greet <= 6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12005
WP-BibTeX <= 3.0.1 - Cross-Site Request Forgery to Stored and Reflected Cross-Site Scripting
Medium
CVE-2025-0371
Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2024-13536
1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-13404
Link Library <= 7.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-23996
AnyRoad <= 1.3.2 - Cross-Site Request Forgery
High
a5c7a019-953f-441e-b4d5-26f406f9853d
aDirectory – WordPress Directory Listing Plugin <= 1.6.5 - Unauthenticated PHP Object Injection
Medium
CVE-2025-24001
PPO Call To Actions <= 0.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12104
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.9 - Missing Authorization to Authenticated (Subscriber+) Project Page/File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.