Medium
CVE-2025-22499
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-22557
News Publisher Autopilot <= 2.1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22548
ldap_login_password_and_role_manager <= 1.0.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22551
Boot-Modal <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22535
WPListCal <= 1.3.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22576
Site PIN <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-10585
InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading
Medium
CVE-2025-22592
1003 Mortgage Application <= 1.87 - Missing Authorization
High
CVE-2025-22510
WC Price History for Omnibus <= 2.1.4 - Authenticated (Shop manager+) PHP Object Injection
Medium
CVE-2024-12205
Themesflat Addons For Elementor <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22565
vooPlayer v4 <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-22521
wp Hosting Performance Check <= 2.18.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-22560
Saoshyant Page Builder <= 3.8 - Missing Authorization
Medium
CVE-2025-22821
StorePress <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12713
SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure
Medium
CVE-2025-22511
Slides & Presentations <= 0.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12851
Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22513
Simple Locator <= 2.0.4 - Reflected Cross-Site Scripting
High
CVE-2025-22553
Multiple Carousel <= 2.0 - Unauthenticated SQL Injection
Critical
CVE-2024-11613
WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion
Medium
CVE-2025-22810
Content Blocks Builder <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22567
TRUSTist REVIEWer <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22806
Black Widgets For Elementor <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22812
News Ticker Widget for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.