High
CVE-2024-3112
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-6023
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Email Adding
Medium
CVE-2024-37218
Page Builder Sandwich – Front-End Page Builder <= 5.1.0 - Missing Authorization
High
CVE-2024-37234
Academy LMS <= 2.0.10 - Open Redirect
Medium
CVE-2024-37223
Restaurant Reservations <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2484
Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets
Medium
CVE-2024-2430
Website Content in Page or Post <= 2024.03.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37220
Optinly <= 1.0.18 - Missing Authorization
Medium
CVE-2024-0974
Social Media Widget <= 4.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6024
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Group/Email Deletion
Critical
CVE-2024-6027
Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter
Medium
CVE-2024-5859
Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting
Critical
CVE-2024-5756
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin
Medium
CVE-2024-3961
ConvertKit <= 2.4.9 - Missing Authorization
Medium
CVE-2024-5344
The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget
High
CVE-2024-5503
WP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion
Medium
CVE-2024-37110
WishList Member X < 3.26.7 - Missing Authorization to Information Disclosure
Medium
CVE-2024-37205
affiliate-toolkit <= 3.4.4 - Unauthenticated Sensitive Information Exposure via Logs
Medium
CVE-2024-37093
MasterStudy LMS <= 3.2.1 - Cross-Site Request Forgery
High
CVE-2024-37107
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2023-3352
Smush – Lazy Load Images, Optimize & Compress Images <= 3.16.4 - Missing Authorization to Resmush List Deletion
Medium
CVE-2024-37222
Master Slider <= 3.10.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-44587
WP 2FA <= 2.6.3 - Unauthenticated Information Exposure via Log File
Critical
CVE-2024-37109
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.