High
CVE-2024-52474
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-10520
WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion
High
CVE-2024-52451
Post Ideas <= 2 - Unauthenticated SQL Injection
High
CVE-2025-24556
MooWoodle – WordPress & Moodle LMS Integration Bridge <= 3.2.4 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-11094
404 Solution <= 2.35.17 - Missing Authentication to Sensitive Information Exposure
High
CVE-2024-9887
Login using WordPress Users ( WP as SAML IDP ) <= 1.15.6 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-10645
Blogger 301 Redirect <= 2.5.3 - Unauthenticated SQL Injection via br
Medium
CVE-2024-52436
Post SMTP <= 2.9.9 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-52431
WordPress Video Robot - The Ultimate Video Importer <= 1.20.0 - Unauthenticated SQL Injection
Medium
CVE-2024-52435
Premium Packages <= 6.0.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-10795
Popularis Extra <= 1.2.7 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-8978
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure
High
CVE-2024-8979
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
Medium
CVE-2024-10778
BuddyPress Builder for Elementor – BuddyBuilder <= 1.7.4 - Authenticated (Contributor+) Post Disclosure
High
CVE-2024-10174
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthenticated Authorization Bypass
Medium
CVE-2024-10794
Boostify Header Footer Builder for Elementor <= 1.3.6 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10695
Futurio Extra <= 2.0.13 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-9874
WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injection
Medium
CVE-2024-10779
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-51843
Horsemanager <= 1.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-10667
Content Slider Block – Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-8756
Quform - WordPress Form Builder <= 2.20.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-51820
L Squared Hub WP <= 1.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-10688
Attesa Extra <= 1.4.2 - Authenticated (Contributor+) Post Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.