Critical
CVE-2024-49222
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-22359
SyncFields < 4.1 - Reflected Cross-Site Scripting
Critical
CVE-2025-22311
Private Messages for UserPro <= 4.10.0 - Unauthenticated Local File Inclusion
Medium
CVE-2024-56271
WP SecureSubmit <= 1.5.18 - Missing Authorization
Medium
CVE-2025-22323
Image Hover Effects for Elementor <= 1.0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-56290
Multiple Shipping And Billing Address For Woocommerce <= 1.2 - Unauthenticated SQL Injection
High
CVE-2024-56281
워드프레스 결제 심플페이 <= 5.2.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-56276
Contact Form by WPForms <= 1.9.2.2 - Missing Authorization
Medium
CVE-2024-56056
SimpleCharm <= 1.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22326
5centsCDN <= 25.4.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-56294
Nexter Blocks <= 4.0.7 - Missing Authorization
Medium
CVE-2025-22338
WP-tagMaker <= 0.2.2 - Reflected Cross-Site Scripting
Critical
CVE-2024-12583
Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection
Medium
CVE-2025-22362
WPAchievements Free <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12195
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-56279
Compact WP Audio Player <= 1.9.14 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-22320
ProductDyno <= 1.0.24 - Reflected Cross-Site Scripting
Medium
CVE-2024-56275
Envato Elements <= 2.0.14 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2025-22352
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2024-49333
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-49300
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22321
ElementsCSS Addons for Elementor <= 1.0.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22336
Wizhi Multi Filters by Wenprise <= 1.8.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-56272
Hide Category by User Role for WooCommerce <= 2.1.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.