High
CVE-2024-49649
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2024-12152
MIPL WC Multisite Sync <= 1.1.5 - Unauthenticated Arbitrary File Download
High
CVE-2024-53800
Rezgo Online Booking <= 4.17 - Unauthenticated Local File Inclusion
Medium
CVE-2024-12047
WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter
Medium
CVE-2024-12237
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.15 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
High
CVE-2024-56282
WPMozo Addons Lite for Elementor <= 1.1.0 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-51919
Fancy Product Designer <= 6.4.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-22364
Ach Invoice App <= 1.0.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-22654
Simplified Plugin <= 1.0.6 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-22311
Private Messages for UserPro <= 4.10.0 - Unauthenticated Local File Inclusion
High
CVE-2024-56281
워드프레스 결제 심플페이 <= 5.2.0 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-12583
Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection
Medium
CVE-2024-56279
Compact WP Audio Player <= 1.9.14 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2024-56275
Envato Elements <= 2.0.14 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2024-56278
WP Ultimate Exporter <= 2.9.1 - Authenticated (Admin+) Remote Code Execution
Critical
CVE-2024-43243
JobBoard Job listing <= 1.2.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-22346
Course Migration for LearnDash <= 1.0.2 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2024-56286
Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Editor+) Local File Inclusion
Medium
CVE-2024-56248
WPMasterToolKit <= 1.13.1 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-56264
ACF City Selector <= 1.14.0 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2024-56249
WPMasterToolKit <= 1.13.1 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2024-12272
WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-12850
Database Backup and check Tables Automated With Scheduler 2024 <= 2.32 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2024-12103
Content No Cache: prevent specific content from being cached <= 0.1.2 - Unauthenticated Private Content Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.