Kritisch
CVE-2024-13742
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 8.950
Filter zurücksetzen
Hoch
CVE-2024-12269
Safe Ai Malware Protection for WP <= 1.0.17 - Missing Authorization to Unauthenticated Database Export
Kritisch
CVE-2025-0493
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion
Mittel
CVE-2024-13623
Order Export for WooCommerce <= 3.24 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Mittel
CVE-2024-13470
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2024-13457
Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure
Mittel
CVE-2024-12861
W2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Hoch
CVE-2024-13707
WP Image Uploader <= 1.0.1 - Cross-Site Request Forgery to Arbitrary File Deletion
Hoch
CVE-2024-13720
WP Image Uploader <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Mittel
CVE-2025-24688
WP Mailster <= 1.8.20.0 - Reflected Cross-Site Scripting
Mittel
CVE-2024-13521
MailUp Auto Subscription <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Kritisch
CVE-2025-24685
Morkva UA Shipping <= 1.0.18 - Unauthenticated Local File Inclusion
Hoch
CVE-2025-24782
Post Grid, Slider & Carousel Ultimate <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
Hoch
CVE-2025-24734
Better Find and Replace <= 1.6.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Hoch
CVE-2024-11936
Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Mittel
CVE-2024-12113
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion
Mittel
CVE-2024-13550
ABC Notation <= 6.1.3 - Authenticated (Contributor+) Arbitrary File Read
Mittel
CVE-2024-13467
WP Contact Form7 Email Spam Blocker <= 1.0.0 - Reflected Cross-Site Scripting
Mittel
CVE-2024-13458
WordPress SEO Friendly Accordion FAQ with AI assisted content generation <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2025-24650
Tourfic <= 2.15.3 - Authenticated (Admin+) Arbitrary File Upload
Hoch
CVE-2024-13562
Import WP – Export and Import CSV and XML files to WordPress <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Hoch
CVE-2025-24733
Post Grid Master <= 3.4.12 - Authenticated (Contributor+) Local File Inclusion
Mittel
CVE-2025-24604
VForm <= 3.0.5 - Missing Authorization
Hoch
CVE-2025-24570
Atarim <= 4.0.8 - Unauthenticated Stored Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.