Medium
CVE-2024-13700
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-12173
Master Slider <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13127
LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Unrated
CVE-2025-22206
JS Jobs - SQL Injection
Medium
CVE-2024-13561
Target Video Easy Publish <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via brid_override_yt Shortcode
Medium
CVE-2025-0353
Divi Torque Lite <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Low
ghsa-r5w7-f542-q2j4
Potential DoS when using ContextLines integration
Medium
CVE-2025-24856
TYPO3-EXT-SA-2025-001: Account Takeover in extension "OpenID Connect Authentication" (oidc)
Medium
CVE-2024-11956
pimcore/customer-data-framework vulnerable to SQL Injection
High
CVE-2024-11954
Pimcore Authenticated Stored Cross-Site Scripting (XSS) Via Search Document
High
CVE-2024-13696
Flexible Wishlist for WooCommerce <= 1.2.25 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter
Medium
CVE-2025-0736
Infinispan vulnerable to Insertion of Sensitive Information into Log File
Medium
CVE-2024-23953
Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing
Medium
CVE-2025-24686
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-24688
WP Mailster <= 1.8.20.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24810
Simple Image Sizes <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-0804
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-0321
ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
Medium
CVE-2024-13521
MailUp Auto Subscription <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Low
CVE-2024-55227
Dolibarr Cross-site Scripting vulnerability
Low
CVE-2024-55228
Dolibarr Cross-site Scripting vulnerability
High
CVE-2025-24357
vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator
Low
CVE-2025-24783
Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator
High
ghsa-gvvw-rr8m-fj76
uniapi version 1.0.7 contained an information harvesting script.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.