Medium
CVE-2024-56206
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2024-56203
Wayne Audio Player <= 1.0 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-12560
Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Medium
CVE-2024-56062
Royal Elementor Addons <= 1.3.987 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10548
WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
Critical
CVE-2024-56205
AI Magic <= 1.0.4 - Unauthenticated Privilege Escalation
High
CVE-2024-56068
WP SuperBackup <= 2.3.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-56070
WP SuperBackup <= 2.3.3 - Missing Authorization
Medium
CVE-2024-56069
WP SuperBackup <= 2.3.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-56061
Computer Repair Shop <= 3.8119 - Authenticated (Customer+) Privilege Esclation via Account Takeover
Medium
CVE-2025-24581
Instantio <= 3.3.7 - Missing Authorization to Unauthenticated Settings Update
Critical
CVE-2024-56064
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-12331
File Manager Pro – Filester <= 1.8.6 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
Medium
CVE-2025-24583
12 Step Meeting List <= 3.16.5 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2024-56204
Sinking Dropdowns <= 1.25 - Cross-Site Request Forgery
Medium
CVE-2024-12585
Property Hive <= 2.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56063
Essential Addons for Elementor <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12539
Elasticsearch Incorrect Authorization vulnerability
High
CVE-2024-49194
Databricks JDBC Driver Command Injection vulnerability
Medium
CVE-2024-11993
Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting
Medium
CVE-2024-12454
Affiliate Program Suite — SliceWP Affiliates <= 1.1.23 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12554
Peter’s Custom Anti-Spam <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function
High
CVE-2024-50379
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
Medium
CVE-2024-54677
Apache Tomcat Uncontrolled Resource Consumption vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.