High
CVE-2025-0682
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2024-13409
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()
Critical
CVE-2024-13545
Bootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File Inclusion
High
CVE-2024-13408
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-11913
Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Medium
CVE-2024-13698
Jobify - Job Board WordPress Theme <= 4.2.7 - Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image Generation
High
CVE-2024-13593
BMLT Meeting Map <= 2.6.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-13544
Zarinpal Paid Downloads <= 2.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-13360
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2024-13091
WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload
High
CVE-2025-24677
Post/Page Copying Tool to Export and Import post/page for Cross site Migration <= 2.0.3 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2025-23945
Popliup – WordPress Popup Plugin <= 1.1.1 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2025-23948
Background animation blocks <= 2.1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-23562
XLSXviewer <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2024-10799
Eventer <= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2025-23819
WP Cloud <= 1.4.3 - Unauthenticated Arbitrary File Read
Medium
CVE-2025-23802
WP-Revive Adserver <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-23915
FAT Event Lite <= 1.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-23942
WP Load Gallery <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2025-23918
Smallerik File Browser <= 1.1 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-23422
Store Locator for WordPress with Google Maps – LotsOfLocales <= 3.98.10 - Unauthenticated Local File Inclusion
High
CVE-2025-23938
Image Gallery Box by CRUDLab <= 1.0.3 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2025-23921
Multi Uploader for Gravity Forms <= 1.1.3 - Unauthenticated Arbitrary File Upload
High
CVE-2024-13333
Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.