Medium
CVE-2024-51651
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-11815
Pósturinn\'s Shipping with WooCommerce <= 1.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12316
Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export
Medium
CVE-2025-22314
Food Store – Online Food Delivery & Pickup <= 1.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-12499
WP jQuery DataTable <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12152
MIPL WC Multisite Sync <= 1.1.5 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-22310
TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22302
WP Wand <= 1.2.5 - Missing Authorization
Medium
CVE-2024-12738
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-13052
Dental Optimizer Patient Generator App <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2024-12202
Croma Music <= 3.6 - Authenticated (Subscriber+) Arbitrary Options Update in ironMusic_ajax
Medium
CVE-2024-9354
Estatik Mortgage Calculator <= 2.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2025-22261
WP FullCalendar <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12807
Social Share Buttons for WordPress <= 2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12321
WC Affiliate <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22301
MyBookTable Bookstore <= 3.5.3 - Cross-Site Request Forgery
Medium
CVE-2024-12624
Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ
High
CVE-2024-11725
SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2025-22293
Gutentor <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12719
WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal
Medium
CVE-2025-22299
AI for SEO <= 1.2.9 - Missing Authorization
Medium
CVE-2024-11369
Store credit / Gift cards for woocommerce <= 1.0.49.46 - Reflected Cross-Site Scripting
Medium
CVE-2024-13117
Social Share Buttons for WordPress <= 2.7 - Missing Authorization to Unauthenticated Image Upload & Path Traversal
Medium
CVE-2025-22296
Hash Elements <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.