High
CVE-2025-26753
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-26763
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2024-13879
Stream <= 4.0.2 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2025-26760
Calculator Builder – Create an Online Calculator <= 1.6.2 - Unauthenticated Local File Inclusion
Critical
CVE-2024-12562
s2Member Pro <= 241216 - Unauthenticated PHP Object Injection
Medium
CVE-2024-13826
Email Keep <= 1.1 - Cross-Site Request Forgery to Email Deletion
Medium
CVE-2025-26775
BEAR <= 1.1.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-26755
WP Airbnb Review Slider <= 3.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-13791
Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function
Medium
CVE-2024-13735
HurryTimer <= 2.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name
Medium
CVE-2024-13641
Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2024-13227
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API
Medium
CVE-2024-13229
Rank Math SEO <= 1.0.235 - Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion
High
CVE-2024-13770
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection
High
CVE-2024-13606
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Critical
CVE-2024-10763
Campress <= 1.35 - Unauthenticated Local File Inclusion
High
CVE-2024-12296
Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options
High
CVE-2024-13600
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
High
CVE-2024-13653
ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Critical
CVE-2024-12213
WP Job Board Pro < 1.2.85 - Unauthenticated Privilege Escalation via process_register
Medium
CVE-2024-13539
AForms Eats <= 1.3.1 - Unauthenticated Full Path Disclosure
High
CVE-2024-13714
All-Images.ai – IA Image Bank and Custom Image creation <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-13769
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-13528
Customer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.