Medium
CVE-2025-24580
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-24756
Roi Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-24755
PDF Invoices for WooCommerce + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24744
Bridge Core <= 3.3 - Missing Authorization
Medium
CVE-2025-24562
KBucket <= 4.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-24579
Nested Pages <= 3.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24627
Blur Text <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-24733
Post Grid Master <= 3.4.12 - Authenticated (Contributor+) Local File Inclusion
Low
CVE-2025-24695
Extensions For CF7 <= 3.2.0 - Authenticated (Admin+) Sever-Side Request Forgery
Medium
CVE-2025-24604
VForm <= 3.0.5 - Missing Authorization
Medium
CVE-2025-24600
RSVPMarker <= 11.4.5 - Missing Authorization
Medium
CVE-2025-24644
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.7.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Medium
CVE-2025-24663
Simple Download Monitor <= 3.9.25 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-24585
Event post <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24657
Wishlist for WooCommerce <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24717
Modal Window <= 6.1.4 - Cross-Site Request Forgery to Settings Ipdate
Medium
CVE-2025-24691
People Lists <= 1.3.10 - Missing Authorization
Medium
CVE-2025-24682
Super Block Slider <= 2.7.9 - Missing Authorization
Medium
CVE-2025-24728
Bug Library <= 2.1.4 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-24570
Atarim <= 4.0.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-24674
ShMapper by Teplitsa <= 1.5.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-24618
ElementInvader Addons for Elementor <= 1.3.1 - Missing Authorization
Medium
CVE-2025-24653
Admin and Site Enhancements (ASE) Pro <= 7.6.1.1 - Missing Authorization
Medium
CVE-2025-24591
GDPR CCPA Compliance Support <= 2.7.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.