Medium
CVE-2024-13126
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-23727
AZ Content Finder <= 0.1 - Reflected Cross-Site Scripting
High
CVE-2025-23931
WordPress Local SEO <= 2.3 - Unauthenticated SQL Injection
Medium
CVE-2024-13519
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 1.9.80 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Medium
CVE-2024-13317
ShipWorks Connector for Woocommerce <= 5.2.5 - Cross-Site Request Forgery to Service Password/Username Update
Medium
CVE-2025-0515
Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Option Update
Low
3a3fa988-6f0b-48d3-a946-0fc587858c9c
WPSyncSheets Lite For Elementor – Elementor Pro Form Google Spreadsheet Addon <= 1.4 - Running Vulnerable Dependencies
Medium
CVE-2025-0554
Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name
Medium
CVE-2024-13352
Legull <= 1.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-23475
History timeline <= 0.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-13391
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-23995
Tantyyellow <= 1.0.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-12370
WP Hotel Booking <= 2.1.5 - Missing Authorization
Medium
CVE-2025-23366
HAL Console has a Cross Site Scripting (XSS) vulnerability of user input
Medium
CVE-2024-12466
Proofreading <= 1.2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-13367
Sandbox <= 0.4 - Missing Authorization to Authenticated (Subscriber+) Sandbox Download
Medium
CVE-2024-12508
Glofox Shortcodes <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12203
RSS Icon Widget <= 5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-12598
MyBookProgress by Stormhill Media <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via book Parameter
Medium
CVE-2024-13386
quote-posttype-plugin <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12637
Moving Users <= 1.05 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-23201
Librenms has a reflected XSS on error alert
Medium
CVE-2025-23200
LibreNMS Misc Section Stored Cross-site Scripting vulnerability
Medium
CVE-2025-23199
LibreNMS Ports Stored Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.