Medium
CVE-2025-22517
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-12749
Competition Form <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22520
Tock Widget <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22824
Live Flight Radar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22512
Help Scout <= 6.5.6 - Missing Authorization
Medium
CVE-2025-22525
Donation Block For PayPal <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22549
WP Github <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12521
Slotti Ajanvaraus <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22816
Power Mag <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22580
Biltorvet Dealer Tools <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22574
ICS Button <= 0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22578
WP Cookie <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22819
Qr Code and Barcode Scanner Reader <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-22540
Emailing Subscription <= 1.4.1 - Unauthenticated SQL Injection
Medium
CVE-2025-22524
formafzar <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22802
Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22527
Mailing Group Listserv <= 2.0.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-22804
Author Avatars List/Block <= 2.1.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22584
Timeline Pro <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via [placeholder]
Medium
CVE-2025-22532
Simple Photo Sphere <= 0.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22292
Powerful Auto Chat <= 1.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-22541
WP Delete Post Copies <= 5.5 - Missing Authorization
Medium
CVE-2024-12328
MAS Elementor <= 1.1.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2025-22507
WPMU Prefill Post <= 1.02 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.