Medium
CVE-2024-12419
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-12538
Duplicate Post, Page and Any Custom Post <= 3.5.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Medium
CVE-2024-12557
Transporters.io <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12559
ClickDesigns <= 1.8.0 - Missing Authorization to API Key Modification or Removal
Medium
CVE-2024-11777
Sell Media <= 2.5.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12528
WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12592
Sellsy <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11934
Formaloo Form Maker & Customer Analytics for WordPress & WooCommerce <= 2.1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-11899
Slider Pro Lite <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12590
WP Youtube Gallery <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Medium
CVE-2025-22297
AI WP Writer <= 3.8.4.4 - Cross-Site Request Forgery
Medium
CVE-2024-49294
Bus Ticket Booking with Seat Reservation <= 5.4.3 - Cross-Site Request Forgery
Medium
CVE-2024-12436
WP Customer Area <= 8.2.4 - Cross-Site Request Forgery to Bulk Deletion
Medium
CVE-2024-51715
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-22309
SpeakOut! Email Petitions <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-10504
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22294
Custom Field For WP Job Manager <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-11826
Quill Forms | The Best Typeform Alternative | Create Conversational Multi Step Form, Survey, Quiz, Cost Estimation or Donation Form on WordPress <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13116
Crelly Slider <= 1.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12711
RSVP and Event Management <= 2.7.13 - Missing Authorization
Medium
CVE-2024-12256
Simple Video Management System <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-22304
WP Visitor Statistics (Real Time Traffic) <= 7.5 - Missing Authorization
High
CVE-2025-22295
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-12773
Altra Side Menu <= 2.0 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.