Medium
CVE-2024-13230
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2025-24665
Small Package Quotes – Unishippers Edition <= 2.4.8 - Unauthenticated SQL Injection
High
CVE-2025-24667
Small Package Quotes – Worldwide Express Edition <= 5.2.17 - Unauthenticated SQL Injection
High
CVE-2025-24664
LTL Freight Quotes – Worldwide Express Edition <= 5.0.20 - Unauthenticated SQL Injection
High
CVE-2024-13184
The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module
Medium
CVE-2024-12385
WP Abstracts <= 2.7.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
High
CVE-2025-0308
Ultimate Member <= 2.9.1 - Unauthenticated SQL Injection
High
CVE-2025-23931
WordPress Local SEO <= 2.3 - Unauthenticated SQL Injection
Medium
CVE-2024-12637
Moving Users <= 1.05 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-23486
Database Sync <= 0.5.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-23774
WPDB to Sql <= 1.2 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-23781
WM Options Import Export <= 1.0.1 - Unauthenticated Information Exposure
Medium
CVE-2025-23779
ResAds <= 2.0.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-23912
WordPress Custom Sidebar <= 2.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-23784
Contact Form 7 Round Robin Lead Distribution <= 1.2.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-23892
Progress Tracker <= 0.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-23780
Easy Code Snippets <= 1.0.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-23910
Menus Plus+ <= 1.9.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-23911
Solidres – Hotel booking plugin <= 0.9.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-23789
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-23913
WordPress Google Map Professional <= 1.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-12613
Passwords Manager <= 1.4.8 - Unauthenticated SQL Injection
Medium
CVE-2024-12615
Passwords Manager <= 1.4.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22710
Smart Manager <= 8.52.0 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.