Medium
CVE-2025-23941
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 391
Reset filters
Medium
CVE-2024-11899
Slider Pro Lite <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-22311
Private Messages for UserPro <= 4.10.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22322
Private Messages for UserPro <= 4.10.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56212
Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-56211
Userpro <= 5.1.9 - Missing Authorization
Critical
CVE-2024-56214
Userpro <= 5.1.9 - Unauthenticated Local File Inclusion
Medium
CVE-2024-56210
Userpro <= 5.1.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-12239
PowerPack Lite for Beaver Builder <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameter
Medium
CVE-2024-54325
CarDealerPress <= 6.6.2410.02 - Reflected Cross-Site Scripting
High
CVE-2024-54379
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2024-10692
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.8.1 - Authenticated (Contributor+) Post Disclosure
Critical
CVE-2024-52442
UserPlus <= 2.0 - Privilege Escalation
Medium
CVE-2024-47640
WP ERP <= 1.13.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-6757
Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
Medium
CVE-2024-9543
Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode
Medium
CVE-2024-9520
UserPlus <= 2.0 - Missing Authorization via Multiple Functions
Critical
CVE-2024-9518
UserPlus <= 2.0 - Unauthenticated Privilege Escalation
High
CVE-2024-9519
UserPlus <= 2.0 - Authenticated (Editor+) Registration Form Update to Privilege Escalation
Medium
CVE-2024-5024
MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
Medium
CVE-2024-43956
Memberpress <= 1.11.34 - Missing Authorization
Medium
CVE-2024-43330
PowerPack for Beaver Builder <= 2.37.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-5614
Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-39634
PowerPack Pro for Elementor <= 2.10.14 - Authenticated (Contributor+) Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.