Critical
CVE-2024-30498
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-0956
WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection
Medium
CVE-2024-30514
Paid Memberships Pro – Payfast Gateway Add On <= 1.4.1 - Unauthenticated Information Exposure
Critical
CVE-2024-30491
ProfileGrid <= 5.7.8 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-30497
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.17 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-0608
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-30494
OSS Aliyun <= 1.4.10 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-30478
WordPress Announcement & Notification Banner Plugin – Bulletin <= 3.8.5 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-30502
WP Travel Engine <= 5.7.9 - Unauthenticated SQL Injection
High
CVE-2024-0913
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection
Medium
CVE-2024-30523
Paid Memberships Pro – Mailchimp Add On <= 2.3.4 - Unauthenticated Information Disclosure
Critical
CVE-2024-30490
ProfileGrid <= 5.7.8 - Unauthenticated SQL Injection
Medium
CVE-2024-30469
Wholesale For WooCommerce <= 2.3.0 - Unauthenticated Information Exposure
Critical
CVE-2024-30489
WP Cost Estimation & Payment Forms Builder <= 10.1.75 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-30488
Zotpress <= 7.3.7 - Authenticated (Contributor+) SQL Injection
High
CVE-2023-6967
Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode
Critical
CVE-2024-30486
Media Library Folders <= 8.1.7 - Authenticated (Author+) SQL Injection
Critical
CVE-2024-30496
Element Pack Elementor Addons <= 5.5.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-30495
Falang multilanguage <= 1.3.47 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-2954
WordPress Action Network 1.4.3 -Authentcated (Admin+) SQL Injection
Critical
CVE-2024-30239
Zoho Campaigns <= 2.0.6 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-30245
DecaLog <= 3.9.0 - Authenticated (Admin+) SQL injection
Critical
CVE-2024-30243
WordPress Tooltips <= 9.4.3 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-30236
Photos and Files Contest Gallery <= 21.3.4 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.