Medium
CVE-2024-13341
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-13651
RapidLoad – Optimize Web Vitals Automatically <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Limited Setting Reset
Medium
CVE-2024-13775
WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure
Medium
CVE-2024-13314
Carousel, Slider, Gallery by WP Carousel <= 2.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12184
WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download
Medium
CVE-2024-13585
Ajax Search Lite <= 4.12.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-22683
NotificationX <= 2.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-0522
LikeBot – Decentralized like-system <= 0.85 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-11780
Site Search 360 <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22682
Hesabfa Accounting <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-12825
Custom Related Posts <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates
Medium
CVE-2025-24699
WP Coder – Code Snippets + HTML, CSS, JS and PHP Injection <= 3.6.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22700
Traveler Code <= 3.1.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22693
Contest Gallery <= 25.1.0 - Authenticated (Author+) SQL Injection
Medium
CVE-2025-22697
Responsive Blocks <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13547
aThemes Addons for Elementor <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-0366
Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
High
CVE-2024-13343
WooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-13612
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-22681
Content Cloner <= 1.0.1 - Missing Authorization
Medium
CVE-2024-12041
Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure
Medium
CVE-2024-12267
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion
Medium
CVE-2024-12415
AI Infographic Maker <= 4.9.0 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-0142
Jenkins Zoom Plugin Stores Sensitive Information in Cleartext
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.