Mittel
CVE-2024-11889
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.609
Mittel
CVE-2024-12517
WooCommerce Cart Count Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-11095
Visualmodo Elements <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Mittel
CVE-2024-12447
Get Post Content Shortcode <= 0.4 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via post_content Shortcode
Hoch
CVE-2024-9698
Crafthemes Demo Import <= 3.3 - Authenticated (Admin+) Arbitrary File Upload in process_uploaded_files
Mittel
CVE-2024-11865
Tabs Maker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-11873
glomex oEmbed <= 0.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-12448
Posts and Products Views for WooCommerce <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-11876
Kredeum NFTs, the easiest way to sell your NFTs directly on your WordPress site <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-11855
Koalendar – Events & Appointments Booking Calendar <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via height Parameter
Mittel
CVE-2024-11867
Companion Portfolio – Responsive Portfolio Plugin <= 2.4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-12523
States Map US <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2024-21543
Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, gra
Mittel
CVE-2024-21544
Browsershot Local File Inclusion
Mittel
CVE-2024-12422
Import Eventbrite Events <= 1.7.4 - Reflected Cross-Site Scripting
Mittel
CVE-2024-12459
Ganohrs Toggle Shortcode <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-11712
WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download
Hoch
CVE-2024-11721
Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Privilege Escalation
Mittel
CVE-2024-11752
Eveeno <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-12474
GeoDataSource Country Region DropDown <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-24574
PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting
Mittel
CVE-2024-12411
WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More <= 2.5.4 - Reflected Cross-Site Scripting
Mittel
CVE-2024-55864
My WP Customize Admin/Frontend <= 1.24.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-11710
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.