Medium
CVE-2025-24680
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2024-13726
Themes Coder <= 1.3.4 - Unauthenticated SQL Injection
Medium
CVE-2025-23977
Post Carousel Slider <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13608
Track Logins <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2024-13603
Wise Forms <= 1.2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-23989
Internal Link Builder <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-23982
Fare Calculator <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13626
VR Frases <= 3.0.1 - Reflected Cross-Site Scripting
High
CVE-2025-24734
Better Find and Replace <= 1.6.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-13505
Survey Maker <= 5.1.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Survey Question
Medium
CVE-2024-12334
WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting
High
CVE-2024-10633
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content
High
CVE-2024-10574
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross-Site Scripting
High
CVE-2024-10628
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id
Medium
CVE-2024-10705
Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl
Medium
CVE-2024-11090
Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
High
CVE-2024-11641
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-10636
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via content
High
CVE-2024-11936
Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Unrated
822
sourcer - Other
Medium
CVE-2024-57041
NodeBB Cross-site scripting (XSS) vulnerability
Medium
CVE-2025-0350
Divi Carousel Lite <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Logo Carousel Widgets
Medium
CVE-2025-24363
HL7 FHIR IG Publisher potentially exposes GitHub repo user and credential information
Unrated
pysec-2025-2
uniapi version 1.0.7 contained an information harvesting script.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.