Medium
CVE-2024-12874
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-11357
Goodlayers Core <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56517
LGSL has a reflected XSS at /lgsl_files/lgsl_list.php
High
CVE-2024-56734
Better Auth has an Open Redirect Vulnerability in Verify Email Endpoint
Critical
CVE-2024-50703
TeamPass privileges issue
Medium
CVE-2024-50701
TeamPass does not properly check whether a folder is in a user's allowed folders list
Medium
CVE-2024-50702
TeamPass mail_me operation authorization issue
Medium
CVE-2024-56258
Magazine Blocks <= 1.3.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56248
WPMasterToolKit <= 1.13.1 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-56264
ACF City Selector <= 1.14.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-56262
GS Coaches <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56259
GeoDirectory <= 2.3.84 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56260
ShopElement <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56246
Nexter Blocks <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56242
Arconix Shortcodes <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56238
Floating Action Buttons <= 0.9.1 - Missing Authorization
Medium
CVE-2025-24617
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 9.11.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24621
Arconix Shortcodes <= 2.1.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-56266
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.8 - Missing Authorization
Medium
CVE-2024-56251
Event Espresso 4 Decaf <= 5.0.28.decaf - Cross-Site Request Forgery
Medium
CVE-2024-56245
Premium Blocks – Gutenberg Blocks for WordPress <= 2.1.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56243
WPSSO Core <= 18.18.1 - Missing Authorization
Medium
CVE-2024-56247
WP Post Author <= 3.8.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-56249
WPMasterToolKit <= 1.13.1 - Authenticated (Admin+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.