Medium
CVE-2024-9454
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-9613
FormFacade – WordPress plugin for Google Forms <= 1.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-9462
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings
Critical
CVE-2024-50477
Stacks Mobile App Builder <= 5.2.3 - Authentication Bypass via Account Takeover
Critical
CVE-2024-50476
GRÜN spendino Spendenformular <= 1.0.1 - Unauthenticated Arbitrary Options Update
Critical
CVE-2024-50490
PegaPoll <= 1.0.2 - Unauthenticated Arbitrary Options Update
Critical
CVE-2024-50485
Exam Matrix <= 1.5 - Unauthenticated Privilege Escalation
Critical
CVE-2024-50494
Sudan Payment Gateway for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-9930
Extensions by HocWP Team <= 0.2.3.2 - Authentication Bypass
Critical
CVE-2024-9932
Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload
High
CVE-2024-10402
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation
Critical
CVE-2024-50495
Plugin Propagator <= 0.1 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-50498
WP Query Console <= 1.0 - Unauthenticated Remote Code Execution
Critical
CVE-2024-50497
Advanced Online Ordering and Delivery Platform <= 2.0.0 - Unauthenticated Local File Inclusion
High
CVE-2024-50480
Marketing Automation by AZEXO <= 1.27.80 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-9475
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter
Medium
CVE-2024-9626
Editorial Assistant by Sovrn <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Attachment Upload and Set Post Featured Image
Critical
CVE-2024-50486
Acnoo Flutter API <= 1.0.5 - Authentication Bypass via Account Takeover
High
CVE-2024-9890
User Toolkit <= 1.2.3 - Authenticated (Subscriber+) Authentication Bypass
Critical
CVE-2024-50483
Meetup <= 0.1 - Authentication Bypass via Account Takeover
Critical
CVE-2024-50487
MaanStore API <= 1.0.1 - Authentication Bypass via Account Takeover
Critical
CVE-2024-50493
Automatic Translation <= 1.0.4 - Unauthenticated Arbitrary File Upload
High
CVE-2024-8392
WordPress Post Grid Layouts with Pagination – Sogrid <= 1.5.6 - Authenticated (Admin+) Local File Inclusion
Critical
CVE-2024-50489
Realty Workstation <= 1.0.45 - Authentication Bypass to Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.