Medium
CVE-2024-12061
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-11295
Simple Page Access Restriction <= 1.0.29 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-11291
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-8855
WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) SQL Injection
High
CVE-2024-56039
VibeBP < 1.9.9.7.7 - Unauthenticated SQL Injection
Medium
CVE-2024-56041
VibeBP < 1.9.9.5.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-12340
Animation Addons for Elementor <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template
Medium
CVE-2024-56053
WPLMS < 1.9.9.5.3 - Authenticated (Instructor+) SQL Injection
Medium
CVE-2024-56047
WPLMS < 1.9.9.5.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-56042
WPLMS < 1.9.9.5.3 - Unauthenticated SQL Injection
High
CVE-2024-12025
Collapsing Categories <= 3.0.8 - Unauthenticated SQL Injection
Medium
CVE-2024-11280
PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-10356
ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-12311
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.43 - Authenticated (Admin+) SQL Injection
High
CVE-2024-8326
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-11294
Memberful <= 1.73.9 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
High
CVE-2024-55987
Advanced What should we write next about <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-55989
WP Simple Pay Lite Manager <= 1.4 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-55978
Code Generator Pro <= 1.2 - Unauthenticated SQL Injection
Medium
CVE-2024-55985
YDS Support Ticket System <= 1.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-55980
Wr Age Verification <= 2.0.0 - Unauthenticated SQL Injection
High
CVE-2024-55984
Saksh Escrow System <= 2.4 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-55974
Mimoos <= 1.2 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-55988
Navayan CSV Export <= 1.0.9 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.