Medium
CVE-2025-22754
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-22759
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13328
Giga Messenger – Express <= 2.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-22752
GSheetConnector for Forminator Forms <= 1.0.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-13332
TransFinanz <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-13326
iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting
High
CVE-2025-22736
User Management <= 1.1 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-12767
BuddyBoss Platform < 2.7.60 - Insecure Direct Object Reference to Private Post Comment Exposure
Medium
CVE-2025-22737
WpTravelly <= 1.8.5 - Missing Authorization
Medium
CVE-2025-22766
Zarinpal Paid Download <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12423
Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-11851
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
High
CVE-2025-24641
Better WishList API <= 1.1.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22769
Multifox <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22748
SetMore Theme – Custom Post Types <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22746
HireHive Job Plugin <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22734
Posts Footer Manager <= 2.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22765
WP Order By <= 1.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22781
Nativery <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22735
Tag Groups is the Advanced Way to Display Your Taxonomy Terms <= 2.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-22773
Htaccess File Editor <= 1.0.19 - Unauthenticated Information Exposure
Medium
CVE-2025-22772
Mapbox for WP Advanced <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24645
Eazy Under Construction <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22758
Elementor AI Addons <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.