Critical
CVE-2024-3604
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-5648
LearnDash LMS - Reports Free <= 1.8.2.1 - Missing Authorization to Plugin Settings Update
High
CVE-2024-5792
Houzez CRM <= 1.4.2 - Authenticated (Seller+) SQL Injection
High
CVE-2024-6166
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection
High
CVE-2024-5793
Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection
Critical
CVE-2024-37494
Youzify <= 1.2.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-37504
FileBird Document Library <= 2.0.6 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-37486
Paid Memberships Pro <= 3.0.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-37498
Table & Contact Form 7 Database – Tablesome <= 1.0.33 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-6172
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe
Critical
CVE-2024-6265
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort_by'
High
CVE-2024-5598
Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing
Critical
CVE-2024-6205
PayPlus Payment Gateway <= 6.6.8 - Unauthenticated SQL Injection
High
CVE-2024-2386
WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-6288
Conversios.io - All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 7.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-2795
SEO SIMPLE PACK <= 3.2.1 - Information Exposure
Medium
CVE-2024-37270
TrustedLogin Vendor < 1.1.1 - Unauthenticated Information Disclosure
Medium
379a5016-3968-4b28-8d6e-0f517e419016
Various Plugins <= Various Version - Use of Polyfill.io
Critical
CVE-2024-6028
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
Critical
CVE-2024-37225
Zoho Marketing Automation <= 1.2.7 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-6027
Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter
Critical
CVE-2024-5756
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin
Medium
CVE-2024-37113
WishList Member X < 3.26.7 - Unauthenticated Information Exposure
Critical
CVE-2024-37090
Consulting Elementor Widgets <= 1.3.0 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.