Medium
CVE-2024-13778
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Medium
CVE-2024-8682
JNews - WordPress Newspaper Magazine Blog AMP Theme <= 11.6.6 - Unauthorized User Registration
Medium
CVE-2024-5667
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library
High
CVE-2024-13617
Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-1435
bbPress <= 2.6.11 - Cross-Site Request Forgery to Limited Privilege Escalation
Medium
CVE-2024-13779
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-13780
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Directory Deletion
Medium
CVE-2025-0958
Ultimate WordPress Auction Plugin <= 4.2.9 - Missing Authorization to Arbitrary Post Deletion
Medium
CVE-2025-0370
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via src Parameter
Medium
CVE-2024-13682
Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Cross-Site Request Forgery
Medium
CVE-2024-13724
Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Missing Authorization
Medium
CVE-2024-42512
Security Update for the OPC UA .NET Standard Stack
Medium
CVE-2024-42513
Security Update for the OPC UA .NET Standard Stack
Medium
CVE-2024-9618
Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Critical
CVE-2025-1716
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pick
Medium
CVE-2025-0433
Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Medium
CVE-2025-27408
Manifest Uses a One-Way Hash without a Salt
Medium
CVE-2025-0512
Structured Content (JSON-LD) #wpsc <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode
Low
CVE-2025-27400
Magento LTS vulnerable to stored XSS in theme config fields
Low
CVE-2024-53384
tsup DOM Clobbering vulnerability
Low
CVE-2024-51091
seajs Cross-site Scripting vulnerability
Low
CVE-2024-55532
Apache Ranger Improper Neutralization of Formula Elements vulnerability
Medium
CVE-2024-53388
mavo DOM Clobbering vulnerability
Low
CVE-2025-24023
Flask-AppBuilder Observable Response Discrepancy
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.