Medium
CVE-2024-12261
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-11363
Same but Different – Related Posts by Taxonomy <= 1.0.16 - Reflected Cross-Site Scripting
Medium
CVE-2024-12126
SEO Keywords <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter
Medium
CVE-2024-12159
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords <= 3.1 - Information Exposure
Medium
CVE-2024-11290
Member Access <= 1.1.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-12214
WooCommerce HSS Extension for Streaming Video <= 3.31 - Reflected Cross-Site Scripting via videolink Parameter
Medium
CVE-2024-12435
Compare Products for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting
High
CVE-2024-12313
Compare Products for WooCommerce <= 3.2.1 - Unauthenticated PHP Object Injection
High
CVE-2025-21612
Extension:TabberNeue vulnerable to Cross-site Scripting
Medium
CVE-2024-11337
Horoscope And Tarot <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12288
Simple add pages or posts <= 2.0.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-11382
Common Ninja: Fully Customizable & Perfectly Responsive Free Widgets for WordPress Websites <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12157
Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Unauthenticated SQL Injection
Medium
CVE-2024-12324
Unilevel MLM Plan <= 1.1.0 - Reflected Cross-Site Scripting via 'page'
Critical
CVE-2024-12252
SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)
Medium
CVE-2024-11378
Bizapp for WooCommerce <= 2.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-12176
WordLift – AI powered SEO – Schema <= 3.54.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-11377
Automate Hub Free by Sperse.IO <= 1.7.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-12327
LazyLoad Background Images <= 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
Medium
CVE-2024-12170
ViewMedica Embed <= 1.4.15 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2024-12291
ViewMedica 9 <= 1.4.17 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12153
GDY Modular Content <= 0.9.92 - Reflected Cross-Site Scripting
Medium
CVE-2024-11375
WC1C <= 0.23.0 - Reflected Cross-Site Scripting
High
CVE-2024-12322
ThePerfectWedding.nl Widget <= 2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.