Critical
CVE-2024-49624
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2024-49615
SafetyForms <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2024-49628
Most And Least Read Posts Widget <= 2.5.18 - Cross-Site Request Forgery via most_and_least_read_posts_options
High
CVE-2024-49616
Rate Own Post <= 1.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-49605
AVChat Video Chat <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-49608
GERRYWORKS Post by Mail <= 1.0 - Contributor+ Privilege Escalation
Medium
CVE-2024-49631
Easy Addons for Elementor <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49334
jLayer Parallax Slider <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2024-49620
FERMA.ru.net <= 1.3.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-9593
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
High
CVE-2024-49612
SW Contact Form <= 1.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-6243
EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email
Medium
CVE-2024-49606
Google Map Locations <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2019-25218
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.3 - Authenticated (Admin+) SQL Injection
High
CVE-2024-49613
Simple Code Insert Shortcode <= 1.0 - Authenticated (Contributor+) SQL Injection
Unrated
CVE-2025-25225
HikaShop - Other ACL
Medium
CVE-2024-9674
Debrandify · Remove or Replace WordPress Branding <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9425
Advanced Category and Custom Taxonomy Image <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_tax_image Shortcode
Medium
CVE-2024-10057
RSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode
Medium
CVE-2024-48924
MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow
Medium
CVE-2024-10055
Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsaio_snapchat Shortcode
Medium
CVE-2024-9452
Branding <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9848
Product Customizer Light <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9892
Add Widget After Content <= 2.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.