Critical
CVE-2024-31260
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-31249
Subscribe To Comments Reloaded <= 220725 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31278
Premium Addons for Elementor <= 4.10.22 - Authenticated (Contributor+) Sensitive Information Exposure
Critical
CVE-2024-31241
LearnPress Export Import <= 4.0.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-31298
User Spam Remover <= 1.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31259
SearchIQ <= 4.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31245
ConvertKit <= 2.4.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31247
FG Drupal to WordPress <= 3.70.3 - Sensitive Information Exposure
Medium
CVE-2024-31254
WordPress Backup & Migration <= 1.4.7 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31302
Contact Form Email <= 1.3.44 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31347
Tracking Code Manager <= 2.1.0 - Missing Authorization via change_order()
Medium
CVE-2024-0872
Watu Quiz <= 3.4.1 - Sensitive Information Disclosure
High
CVE-2024-3217
WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-31233
Rehub <= 19.6.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-31234
REHub Framework < 19.6.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-6695
Beaver Themer <= 1.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode
Critical
CVE-2024-2879
LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection
Medium
CVE-2024-2931
WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure
Critical
CVE-2024-31116
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-2974
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-30535
Easy Form Builder <= 3.7.4 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-0952
WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id
Critical
CVE-2024-30499
CRM Perks Forms <= 1.1.4 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-30504
WP Travel Engine <= 5.7.9 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.