Medium
CVE-2024-11376
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-23515
ts-tree <= 0.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-2247
WP-PManager <= 1.2 - Cross-Site Request Forgery to Category Deletion
Medium
CVE-2025-23956
WP Easy Post Mailer <= 0.64 - Reflected Cross-Site Scripting
Medium
CVE-2025-1363
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-2248
WP-PManager <= 1.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-23536
Track Page Scroll <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-23570
WP Social Links <= 0.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-23670
4 author cheer up donate <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-23425
Marekkis Watermark-Plugin <= 0.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-23494
Quizzin <= 1.01.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-1362
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Cross-Site Request Forgery
Medium
CVE-2025-23487
Easy Gallery <= 1.4 - Reflected Cross-Site Scripting
High
CVE-2025-1302
JSONPath Plus allows Remote Code Execution
Medium
CVE-2025-0822
Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter
Medium
CVE-2024-13500
WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter
Medium
CVE-2025-1005
ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
Medium
CVE-2024-13752
WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Medium
CVE-2025-0935
Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings Change
Medium
CVE-2024-13563
Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode
Medium
CVE-2024-13525
Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
Critical
CVE-2024-13513
Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation
Medium
CVE-2025-25290
@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2025-25289
@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.