Medium
CVE-2024-52435
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2024-52432
NIX Anti-Spam Light <= 0.0.4 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52428
Ads Booster by Ads Pro <= 1.12 - Unauthenticated Local File Inclusion
High
CVE-2024-52429
WP Quick Setup <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin/Theme Installation
Medium
CVE-2024-10881
LUNA RADIO PLAYER <= 6.24.11.07 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2024-52430
Lis Video Gallery <= 0.2.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-10795
Popularis Extra <= 1.2.7 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10480
3DPrint Lite <= 2.0.9.9 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-24551
Radio Buttons and Swatches for WooCommerce <= 1.1.20 - Reflected Cross-Site Scripting
High
CVE-2024-10728
PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation
Medium
CVE-2024-8961
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10825
Hide My WP Ghost – Security & Firewall <= 5.3.01 - Reflected Cross-Site Scripting via URL
High
CVE-2024-49362
Remote Code Execution on click of <a> Link in markdown preview
Medium
CVE-2024-10582
Music Player for Elementor – Audio Player & Podcast Player <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import
Medium
CVE-2024-10113
WP AdCenter – Ad Manager & Adsense Ads <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter_ad Shortcode
Medium
CVE-2024-9356
Yotpo: Product & Photo Reviews for WooCommerce <= 1.7.9 - Reflected Cross-Site Scripting
High
CVE-2024-10260
Tripetto <= 8.0.11 - Unauthentiated Stored Cross-Site Scripting via Form File Upload
High
CVE-2024-10793
WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter
Medium
CVE-2024-10897
Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation
Medium
CVE-2024-9609
LearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-10893
WP Booking Calendar <= 10.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9765
EKC Tournament Manager <= 2.2.1 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-10311
External Database Based Actions <= 0.1 - Authenticated (Subscriber+) Authentication Bypass
Medium
CVE-2024-8978
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.