Medium
CVE-2025-22558
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-22546
jQuery TwentyTwenty <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22808
Surbma | Premium WP <= 9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11939
Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via data
Medium
CVE-2025-22518
Justified Image Gallery <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22803
Advanced Product Information for WooCommerce <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22536
WP Music Player <= 1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-22564
Pretty Url <= 1.5.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-22814
Zephyr Admin Theme <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22590
Prayer Times Anywhere <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22805
Skill Bar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22550
AddFunc Mobile Detect <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11271
WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Webinar Updates
Medium
CVE-2024-11830
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22587
SEO Bulk Editor <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-22823
Genesis Style Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22572
Legacy ePlayer <= 0.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22815
Button Block <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22537
Google Maps Travel Route <= 1.3.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-12873
Custom Field Manager <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22562
Title Experiments Free <= 9.0.4 - Cross-Site Request Forgery
Medium
CVE-2025-22498
LucidLMS <= 1.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22528
Huurkalender WP <= 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22500
Alpha Price Table For Elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.