Medium
CVE-2024-11267
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-11269
AHAthat Plugin <= 1.6 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-24597
Barcode Generator for WooCommerce – Show barcodes on products, orders, invoices and other pages <= 2.0.2 - Authenticated (Subscriber+) Sensitive Information Disclosure
Medium
CVE-2024-10862
NEX-Forms <= 8.7.15 - Authenticated (Admin+) SQL Injection
High
CVE-2024-12428
WP Data Access – App, Table, Form and Chart Builder plugin <= 5.5.22 - Unauthenticated SQL Injection
Medium
CVE-2024-12335
Avada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosure
Medium
CVE-2024-12032
Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-10856
Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12103
Content No Cache: prevent specific content from being cached <= 0.1.2 - Unauthenticated Private Content Disclosure
Medium
CVE-2024-12031
Advanced Floating Content <= 3.8.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-11726
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-8721
Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11722
Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection
Medium
CVE-2024-10797
Full Screen Menu for Elementor <= 1.0.7 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-12635
WP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'
Medium
CVE-2024-11331
isee-products-extractor <= 2.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-54222
Seraphinite Accelerator <= 2.22.15 (2.21.13 PRO) - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2024-56212
Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-24586
Shipment Tracker for Woocommerce <= 1.4.23 - Reflected Cross-Site Scripting
Medium
CVE-2024-11297
Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-12560
Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Medium
CVE-2024-10548
WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
Medium
CVE-2024-12250
Accept Authorize.NET Payments Using Contact Form 7 <= 2.2 - Unauthenticated Information Exposure
High
CVE-2024-11912
Traveler <= 3.1.6 - Unauthenticated SQL Injection via order_id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.