Medium
CVE-2024-12267
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2024-13767
Live2DWebCanvas <= 1.9.11 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2024-11600
Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.6.0 - Authenticated (Administrator+) Remote Code Execution
Medium
CVE-2024-13924
Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery
High
CVE-2024-13671
Music Sheet Viewer <= 4.1 - Unauthenticated Arbitrary File Read
Critical
CVE-2025-0493
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion
Medium
CVE-2024-12861
W2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2024-13720
WP Image Uploader <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2025-24685
Morkva UA Shipping <= 1.0.18 - Unauthenticated Local File Inclusion
High
CVE-2024-44055
Oshine Modules < 3.3.8 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-24782
Post Grid, Slider & Carousel Ultimate <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-13448
ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data
Medium
CVE-2024-10705
Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl
High
CVE-2024-11641
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
Low
CVE-2024-13450
Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2024-13550
ABC Notation <= 6.1.3 - Authenticated (Contributor+) Arbitrary File Read
Medium
CVE-2024-12885
Connections Business Directory <= 10.4.66 - Authenticated (Admin+) Arbitrary Directory Deletion
High
CVE-2025-24650
Tourfic <= 2.15.3 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-24733
Post Grid Master <= 3.4.12 - Authenticated (Contributor+) Local File Inclusion
Low
CVE-2025-24695
Extensions For CF7 <= 3.2.0 - Authenticated (Admin+) Sever-Side Request Forgery
Medium
CVE-2025-24611
WP Ultimate Exporter <= 2.9 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2025-24703
Comment Edit Core – Simple Comment Editing <= 3.0.33 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2025-24701
Chained Quiz <= 1.3.2.9 - Authenticated (Admin+) Server-Side Request Forgery
Critical
CVE-2025-0357
WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.