Medium
CVE-2024-12584
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-22820
VR Views <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22529
WE Blocks <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22581
Arcade Ready <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11270
WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation
Medium
CVE-2025-22505
NC Wishlist for Woocommerce <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22579
WP Header Notification <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22583
Scan External Links <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22813
Conversational Forms for ChatBot <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22563
Pretty Url <= 1.5.4 - Cross-Site Request Forgery
Medium
CVE-2025-22516
Metadata SEO <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22539
Custom DataBase Tables <= 2.1.34 - Reflected Cross-Site Scripting
Medium
CVE-2024-12337
Shipping via Planzer for WooCommerce <= 1.0.25 - Reflected Cross-Site Scripting via processed-ids
Medium
CVE-2024-12852
Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22585
Ultimate Image Hover Effects <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12750
Competition Form <= 2.0 - Cross-Site Request Forgery to Competition Deletion
Medium
CVE-2025-22544
Mind Doodle Visual Sitemaps & Tasks <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22588
Scanventory <= 1.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12855
AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion
Medium
CVE-2025-22561
Title Experiments Free <= 9.0.4 - Missing Authorization
Medium
CVE-2024-12030
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-22559
TubePress.NET <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22818
S3Player – WooCommerce & Elementor Integration <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22811
MT Addons for Elementor <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.