Medium
CVE-2025-22742
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-13215
Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup
Medium
CVE-2025-22724
Product Carousel For WooCommerce – WoorouSell <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22764
WP Post Corrector <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22763
Brizy Pro <= 2.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22750
Post Carousel & Slider <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-0466
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.3 - Unauthenticated Information Exposure
Medium
CVE-2025-22779
WP News Sliders <= 1.0 - Missing Authorization
Medium
CVE-2025-0368
Banner Garden Plugin for WordPress <= 0.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22731
Build Private Store For Woocommerce <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2025-22751
Partners <= 0.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-13329
Solidres <= 0.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-9645
Post Grid and Gutenberg Blocks <= 2.2.92 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13115
WP Projects Portfolio with Client Testimonials <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13325
Glossy <= 2.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22743
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10326
RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets
Medium
CVE-2025-22747
Foundation Columns <= 0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22780
wp-pano <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11848
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Medium
CVE-2025-22729
VOD Infomaniak <= 1.5.9 - Missing Authorization
Medium
CVE-2025-22755
WP Headmaster <= 0.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22761
Ajax Contact Form <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22762
WordPress HelpDesk & Support Ticket System Plugin – Octrace Support <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.