Critical
CVE-2024-56046
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-8857
WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-10102
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11606
Tabs Shortcode <= 2.0.2 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2024-56029
Easy Language Switcher <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2024-56039
VibeBP < 1.9.9.7.7 - Unauthenticated SQL Injection
High
CVE-2024-56052
WPLMS < 1.9.9.5.2 - Authenticated (Student+) Arbitrary File Upload
Medium
CVE-2024-11439
ScanCircle <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56041
VibeBP < 1.9.9.5.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-12340
Animation Addons for Elementor <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template
Medium
CVE-2024-56053
WPLMS < 1.9.9.5.3 - Authenticated (Instructor+) SQL Injection
Medium
CVE-2024-56047
WPLMS < 1.9.9.5.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-9638
Category Posts Widget <= 4.9.17 - Authenticated (Admin+) Stored Cross-Site SCripting
Medium
CVE-2024-56024
Custom Dashboard Widget <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56036
odPhotogallery <= 0.5.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-12287
Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_user
Medium
CVE-2024-56022
Preloader by WordPress Monsters <= 1.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12500
Philantro – Donations and Donor Management <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-56042
WPLMS < 1.9.9.5.3 - Unauthenticated SQL Injection
High
CVE-2024-12025
Collapsing Categories <= 3.0.8 - Unauthenticated SQL Injection
High
CVE-2024-12432
WPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Key
Medium
CVE-2024-35230
Welcome and About GeoServer pages communicate version and revision information
Medium
CVE-2024-12469
WP BASE Booking of Appointments, Services and Events <= 4.9.1 - Reflected Cross-Site Scripting via status Parameter
Medium
CVE-2024-12127
Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS <= 0.0.21 - Reflected Cross-Site Scripting via page Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.