High
CVE-2024-25354
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2023-47438
SQL Injection vulnerability in Reportico Till
Medium
CVE-2022-47153
Jobeleon Theme <= 1.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-30466
WooCommerce Multilingual & Multicurrency <= 5.3.4 - Missing Authorization
Medium
CVE-2024-2729
Otter Blocks <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30437
Webinar and Video Conference with Jitsi Meet <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-0952
WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id
Critical
CVE-2024-30499
CRM Perks Forms <= 1.1.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-30461
Tumult Hype Animations <= 1.9.11 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2024-30504
WP Travel Engine <= 5.7.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-2280
Better Elementor Addons <= 1.4.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links
Critical
CVE-2024-30498
CRM Perks Forms <= 1.1.4 - Unauthenticated SQL Injection
Medium
CVE-2024-30429
wp-forecast <= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2848
Responsive <= 5.0.2 - Missing Authorization to HTML Injection
Medium
CVE-2024-30423
Better Elementor Addons <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2039
Stackable – Page Builder Gutenberg Blocks <= 3.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Posts Block
High
CVE-2023-6999
Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2024-30485
Finale Lite <= 2.18.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation
Medium
CVE-2024-30451
Geo Controller <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-2411
MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal
Medium
CVE-2024-0956
WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection
Medium
CVE-2024-30514
Paid Memberships Pro – Payfast Gateway Add On <= 1.4.1 - Unauthenticated Information Exposure
High
CVE-2024-1872
Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode
Medium
CVE-2024-30503
Mailster <= 1.0.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.