Medium
CVE-2025-24625
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-13306
Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-24741
KB Support <= 1.6.7 - Unauthenticated Open Redirect
Medium
CVE-2025-24732
BookingPress <= 1.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24636
MachForm Shortcode <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-24723
Booking Calendar Contact Form <= 1.2.55 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24719
Widget Countdown <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24748
Avada <= 7.11.10 - Missing Authorization
Medium
CVE-2025-24750
ExactMetrics <= 8.1.0 - Missing Authorization
Medium
CVE-2025-24561
ReviewsTap <= 1.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-24589
JSM Show Post Metadata <= 4.6.0 - Missing Authorization
Medium
CVE-2025-24687
Show/Hide Shortcode <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24588
Patreon WordPress <= 1.9.1 - Missing Authorization
Medium
CVE-2025-24726
HT Conctact Form 7 <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-24650
Tourfic <= 2.15.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-24595
All Embed – Elementor Addons <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24715
Counter Box <= 2.0.5 - Cross-Site Request Forgery
Medium
CVE-2025-24746
Popup Maker <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13551
ABC Notation <= 6.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24693
Advanced Notifications <= 1.2.7 - Missing Authorization
Medium
CVE-2024-13493
Sensly Online Presence <= 0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-24712
Radius Blocks <= 2.1.2 - Cross-Site Request Forgery
Medium
CVE-2025-24578
ElementInvader Addons for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-13562
Import WP – Export and Import CSV and XML files to WordPress <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.