Critical
CVE-2024-52374
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2024-52372
Easy CSV Importer BETA <= 7.0.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-52389
WP Job Portal <= 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-52386
Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-52377
Instant Image Generator <= 1.5.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-52380
Picsmize <= 1.0.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-52390
CYAN Backup <= 2.5.3 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-52393
Podlove Podcast Publisher <= 4.1.15 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2024-52383
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.1.2 - Missing Authorization
Critical
CVE-2024-52379
kineticPay for WooCommerce <= 2.0.8 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-10695
Futurio Extra <= 2.0.13 - Authenticated (Contributor+) Post Disclosure
Critical
CVE-2024-10245
Relais 2FA <= 1.0 - Authentication Bypass
Medium
CVE-2024-52392
W3SPEEDSTER <= 7.25 - Cross-Site Request Forgery
High
CVE-2024-52384
Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-52395
Floating Buttons for WooCommerce <= 2.8.8 - Missing Authorization
Critical
CVE-2024-52376
Boat Rental Plugin for WordPress <= 1.0.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-9357
xili-tidy-tags <= 1.12.04 - Reflected Cross-Site Scripting
Critical
CVE-2024-52371
Global Gateway e4 | Payeezy Gateway | <= 2.0 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2024-52373
Devexhub Gallery <= 2.0.1 - Unauthenticated Arbitrary File Upload
Low
CVE-2024-52396
WOLF <= 1.0.8.3 - Authenticated (Editor+) CSV Path Traversal
High
CVE-2024-10958
WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay
Medium
CVE-2024-10265
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter
Medium
CVE-2025-24544
Bitcoin and Altcoin Wallet <= 6.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-24557
PlainInventory – Inventory Management Plugin <= 3.1.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.