Medium
CVE-2025-24403
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-24401
Disabled permissions can be granted by Folder-based in Jenkins Authorization Strategy Plugin
Medium
CVE-2025-24402
CSRF vulnerability in Jenkins Azure Service Fabric Plugin
Medium
CVE-2025-24400
Cache confusion in Jenkins Eiffel Broadcaster Plugin
High
CVE-2025-24399
Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
Medium
CVE-2025-24397
Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
High
CVE-2025-24398
Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL
Unrated
CVE-2025-3061
drupal/material_admin - SA-CONTRIB-2025-006
Medium
CVE-2024-12477
Avada Builder <= 3.11.11 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets
Critical
CVE-2024-45479
Apache Ranger UI vulnerable to Server Side Request Forgery
Medium
CVE-2024-45478
Apache Ranger has Stored Cross-site Scripting vulnerability in Edit Service Page
Medium
CVE-2025-23992
Toocheke Companion <= 1.166 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-13593
BMLT Meeting Map <= 2.6.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-13236
Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-23662
WP Panoramio <= 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12504
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-13234
Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection
Medium
CVE-2024-12043
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2025-24027
ps_contactinfo has potential XSS due to usage of the nofilter tag in template
High
CVE-2024-13499
GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function
High
CVE-2024-13495
GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function
High
CVE-2024-13496
GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter
Medium
CVE-2024-13447
WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
High
CVE-2024-51417
Property reflection in System.Linq.Dynamic.Core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.