Medium
CVE-2025-27013
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-13862
S3Bubble Media Streaming <= 8.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-0629
Coronavirus (COVID-19) Notice Message <= 1.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-1441
Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2025-27014
Hostiko - Hosting WordPress & WHMCS Theme < 30.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-27016
Drivr Lite – Google Drive Plugin plugin for WordPress <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-13799
User Private Files – File Upload & Download Manager with Secure File Sharing <= 2.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-13489
LTL Freight Quotes – Old Dominion Edition <= 4.2.10 - Unauthenticated SQL Injection
Medium
CVE-2024-13712
Pollin <= 1.01.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-13864
Countdown Timer <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2024-13478
LTL Freight Quotes – TForce Edition <= 3.6.4 - Unauthenticated SQL Injection
Medium
CVE-2025-1065
Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File
High
CVE-2025-0521
Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-13369
Tour Master - Tour Booking, Travel, Hotel <= 5.3.7 - Authenticated (Subscriber+) SQL Injection via review_id Parameter
Critical
CVE-2024-12860
CarSpot – Dealership Wordpress Classified Theme <= 2.4.3 - Unauthenticated Arbitrary Password Reset/Account Takeover
Medium
CVE-2025-0864
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-13523
MemorialDay <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13522
magayo Lottery Results <= 2.0.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13538
BigBuy Dropshipping Connector for WooCommerce <= 2.0.0 - Unauthenticated Full Path Disclosute
Medium
CVE-2024-13579
WP-Asambleas <= 2.85.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13578
WP-BibTeX <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13540
WooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure
High
CVE-2024-13684
Reset <= 1.6 - Cross-Site Request Forgery to Database Reset
High
CVE-2024-13852
Option Editor <= 1.0 - Cross-Site Request Forgery to Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.