Medium
CVE-2025-24631
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-23994
Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2024-32555
Easy Real Estate <= 2.2.9- Unauthenticated Privilege Escalation
High
CVE-2025-24677
Post/Page Copying Tool to Export and Import post/page for Cross site Migration <= 2.0.3 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2025-24629
Import Excel to Gravity Forms <= 1.18 - Reflected Cross-Site Scripting
Medium
CVE-2025-23997
Tamara Checkout <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-32444
RealHomes <= 4.3.6 - Unauthenticated Privilege Escalation
High
CVE-2024-10936
String Locator <= 2.6.6 - Unauthenticated PHP Object Injection
High
CVE-2025-24661
Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab <= 1.1.8 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-24616
Uix Page Builder <= 1.7.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-24640
Empty Tags Remover <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2025-24601
FundPress <= 2.0.6 - Unauthenticated PHP Object Injection
Medium
CVE-2024-8722
WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2025-24660
Simple Membership Custom Messages <= 2.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-23986
Tiki Time <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22622
Age Verification for your checkout page. Verify your customer's identity <= 1.20.0 - Reflected Cross-Site Scripting
High
CVE-2025-24665
Small Package Quotes – Unishippers Edition <= 2.4.8 - Unauthenticated SQL Injection
Medium
CVE-2025-22692
Sponsered Link <= 4.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22267
Weaver Themes Shortcode Compatibility <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22262
Bonjour Bar <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-23981
CarZine <= 1.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-22678
my white <= 2.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-23998
UltraLight <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22264
WP Query Creator <= 1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.