Critical
CVE-2024-50482
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-50479
Woocommerce Quote Calculator <= 1.1 - Unauthenticated SQL Injection
Critical
CVE-2024-50475
Signup Page <= 1.0 - Unauthenticated Arbitrary Options Update
High
CVE-2024-50481
Bstone Demo Importer <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-50502
Cozy Blocks <= 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-50478
1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover
High
CVE-2024-50491
RSVP ME <= 1.9.9 - Unauthenticated SQL Injection
Medium
CVE-2024-50501
Kata Plus <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-50492
ScottCart <= 1.1 - Unauthenticated Remote Code Execution
High
CVE-2024-50488
Token Login <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2024-50484
Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-50496
AR For WordPress <= 6.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-10374
WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode
Medium
CVE-2024-8666
Shoutcast Icecast HTML5 Radio Player <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10016
File Upload Types by WPForms <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10112
Simple News <= 2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via news Shortcode
Medium
CVE-2024-10150
Bamazoo – Button Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dgs Shortcode
Medium
CVE-2024-9607
10Web Social Post Feed <= 1.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-10148
Awesome buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn2 Shortcode
High
CVE-2024-10011
BuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal
Medium
CVE-2024-9109
UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset
Medium
CVE-2024-50466
DarkMySite – Advanced Dark Mode Plugin for WordPress <= 1.2.8 - Cross-Site Request Forgery
Medium
CVE-2024-50456
SEOPress <= 8.1.1 - Missing Authorization
Medium
CVE-2024-50443
PostX <= 4.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.