Medium
CVE-2024-13236
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-13499
GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function
High
CVE-2024-13495
GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function
High
CVE-2024-13496
GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter
Medium
CVE-2024-13447
WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
Medium
CVE-2024-13426
WP-Polls <= 2.77.2 - Unauthenticated SQL Injection to Stored Cross-Site Scripting
Medium
CVE-2024-13543
Zarinpal Paid Downloads <= 2.3 - Reflected Cross-Site Scripting
High
CVE-2025-0429
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms
High
CVE-2025-24671
Save as PDF Plugin by Pdfcrowd <= 4.4.0 - Unauthenticated PHP Object Injection
High
CVE-2025-0428
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts
High
CVE-2024-13544
Zarinpal Paid Downloads <= 2.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-13360
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2024-13361
AI Power: Complete AI Pack <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-13536
1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure
High
a5c7a019-953f-441e-b4d5-26f406f9853d
aDirectory – WordPress Directory Listing Plugin <= 1.6.5 - Unauthenticated PHP Object Injection
Medium
CVE-2024-12104
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.9 - Missing Authorization to Authenticated (Subscriber+) Project Page/File Deletion
Medium
CVE-2025-24631
BP Email Assign Templates <= 1.5 - Reflected Cross-Site Scripting
High
CVE-2024-10936
String Locator <= 2.6.6 - Unauthenticated PHP Object Injection
High
CVE-2025-24661
Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab <= 1.1.8 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-24601
FundPress <= 2.0.6 - Unauthenticated PHP Object Injection
Critical
CVE-2024-13375
Adifier System <= 3.1.7 - Unauthenticated Arbitrary Password Reset
Medium
CVE-2024-13125
Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13516
Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-13126
Download Manager <= 3.3.06 - Unauthenticated Information Disclosure via Unprotected Directory
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.