Critical
CVE-2024-37112
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-37115
Newspack Blocks <= 3.0.8 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-3561
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field
Medium
CVE-2024-4742
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-3605
WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection
Medium
CVE-2024-5059
Event Management Tickets Booking <= 1.4.3 - Unauthenticated Information Exposure
Medium
CVE-2024-35776
phpinfo() WP <= 5.0 - Unauthenticated Information Exposure
High
CVE-2024-5605
Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter
Medium
CVE-2024-5768
MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-5543
Slideshow Gallery LITE <= 1.8.1 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-3922
Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection
High
CVE-2024-4845
Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]
Critical
CVE-2024-3549
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-3723
Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure
Critical
CVE-2024-36082
Music Store - WordPress eCommerce <= 1.1.13 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-4266
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-6748
Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure
High
CVE-2024-4902
Tutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-3592
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-35691
Widget Options - Extended <= 5.1.0 & Widget Options <= 4.0.1 - Authenticated (Subscriber+) Information Disclosure
Critical
CVE-2024-35736
Visualizer <= 3.11.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-35689
Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Cross-Site Request Forgery
Critical
CVE-2024-35750
Gallery – Image and Video Gallery with Thumbnails <= 2.0.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-5599
FileOrganizer <= 1.0.7 - Sensitive Information Exposure via Directory Listing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.