Medium
CVE-2024-11940
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2023-6947
Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal
Critical
CVE-2024-53947
Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions
Medium
CVE-2024-53948
Apache Superset: Error verbosity exposes metadata in analytics databases
Medium
CVE-2024-53949
Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled
Medium
CVE-2024-55565
Predictable results in nanoid generation when given non-integer values
Medium
CVE-2024-12323
turboSMTP <= 4.6 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2024-11106
Simple Restrict <= 1.2.7 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-11868
LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API
High
CVE-2024-11205
WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation
Medium
CVE-2024-11841
Tithe.ly Giving Button <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-12209
WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-24567
WP Mailster <= 1.8.16.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-11464
Easy Code Snippets <= 1.0.2 - Reflected Cross-Site Scripting
High
CVE-2024-11501
Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-11457
Feedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-11380
Mini Program API <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12270
Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection
Medium
CVE-2024-11367
Smoove connector for Elementor forms <= 4.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11374
TWChat – Send or receive messages from users <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12128
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameter
Medium
CVE-2024-12253
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update / Data Access
High
CVE-2024-11010
FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion
High
CVE-2024-54141
phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.