Critical
CVE-2024-1514
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-1568
Seraphinite Accelerator <= 2.20.52 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck
Medium
CVE-2024-1650
Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxRenameCategory
Medium
CVE-2024-0687
Restrict User Access – Ultimate Membership & Content Protection <= 2.5 - Information Exposure
Medium
CVE-2024-27196
postMash – custom post order <= 1.2.0 - Reflected Cross-Site Scripting via m
Medium
CVE-2024-23523
Elementor Pro <= 3.19.2 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2024-1489
SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery
Medium
CVE-2024-27193
PayU India <= 3.8.8 - Reflected Cross-Site Scripting via type
Critical
CVE-2024-1698
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection
Medium
CVE-2024-1499
Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1435
Tainacan <= 0.20.6 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-27191
Slivery Extender <= 1.0.2 - Authenticated(Contributor+) Remote Code Execution via shortcode
Medium
CVE-2024-0829
Comments Extra Fields For Post,Pages and CPT <= 5.0 - Missing Authorization
Medium
CVE-2024-0369
Bulk Edit Post Titles <= 5.0.0 - Missing Authorization via bulkUpdatePostTitles
Medium
CVE-2024-1649
Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxDeleteCategory
Medium
CVE-2024-1497
Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute
Medium
CVE-2024-1910
Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxClearCategory
Medium
CVE-2024-1652
Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxClearCategory
Medium
CVE-2024-0631
Duitku Payment Gateway <= 2.11.6 - Missing Authorization via check_duitku_response
Medium
CVE-2024-1438
Rolo Slider <= 1.0.9 - Missing Authorization to Authenticated(Subscriber+) Settings Change
Medium
CVE-2024-25936
SoundCloud Shortcode <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-27190
Download Media <= 1.4.2 - Missing Authorization via generate_link_for_media
Medium
CVE-2024-0830
Comments Extra Fields For Post,Pages and CPT <= 5.0 - Cross-Site Request Forgery
Medium
CVE-2024-1331
Team Members <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.