Medium
CVE-2025-22515
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2025-22508
FAT Event Lite <= 1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22593
Laika Pedigree Tree <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22586
WPEX Replace DB Urls <= 0.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22552
Affiliate Disclosure Statement <= 0.3 - Cross-Site Request Forgery
Medium
CVE-2025-22807
Responsive Flickr Slideshow <= 2.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22595
Mailing Group Listserv <= 2.0.9 - Reflected Cross-Site Scripting
Critical
CVE-2025-22504
4ECPS Web Forms <= 0.2.18 - Unauthenticated Arbitrary File Upload
High
CVE-2024-11816
The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2025-22514
KNR Author List Widget <= 3.1.1 - Reflected Cross-Site Scripting
High
CVE-2025-22570
Inline Tweets <= 2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22555
Smoothness Slider Shortcode <= v1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12045
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-22543
ST Gallery WP <= 1.0.8 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2025-22826
Sell Digital Downloads <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22547
JK Html To Pdf <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22554
Video Embed Optimizer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22530
아임포트 결제버튼 생성 플러그인 <= 1.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12112
Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-22827
WP Joomag <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22589
Quote Tweet <= 0.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12282
WordPress连接微博 <= 2.5.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22577
Able Player <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22531
Urdu Formatter – Shamil <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.