High
CVE-2024-9305
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2024-49291
Cooked Pro < 1.8.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-49313
VKontakte Wall Post <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-9649
WP ULike <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion
Medium
CVE-2024-9104
UltimateAI <= 2.8.3 - Limited User Password Change due to Improper Empty and Missing Default Value Check
Critical
CVE-2024-49322
Job Board Manager for WordPress <= 1.0 - Unauthenticated Privilege Escalation
Medium
CVE-2024-8787
Smart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-49292
Exclusive Addons Elementor <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9873
Community by PeepSo <= 6.4.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-49305
Email Verification for WooCommerce <= 2.8.10 - Unauthenticated SQL Injection
Medium
CVE-2024-49311
Edwiser Bridge <= 3.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-9883
Pods <= 3.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-49276
Clio Grow <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9521
SEO Manager <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
Medium
CVE-2024-49297
Zoho CRM Lead Magnet <= 1.7.9.7 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-7876
Appointment Booking Calendar <= 1.6.7.53 - Authenticated (Admin+) Stored Cross-Site Scripting via Appointment Settings
Medium
CVE-2024-49296
Custom Add to Cart Button Label and Link <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-9893
Nextend Social Login Pro <= 3.1.14 - Authentication Bypass via WordPress.com OAuth provider
Medium
CVE-2024-7877
Appointment Booking Calendar <= - Authenticated (Admin+) Stored Cross-Site Scripting via Notification Settings
Medium
CVE-2024-49279
Hyperlink Group Block <= 1.17.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-9061
WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add
Medium
CVE-2024-49290
Cooked Pro < 1.8.0 - Cross-Site Request Forgery
High
CVE-2024-8918
File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload
Medium
CVE-2024-49301
G Meta Keywords <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.