Critical
CVE-2024-6314
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2024-6365
Product Table by WBW <= 2.0.1 - Unauthenticated Remote Code Execution
Critical
CVE-2024-6313
Gutenberg Forms <= 2.2.9 - Unauthenticated Arbitrary File Upload
High
CVE-2024-5792
Houzez CRM <= 1.4.2 - Authenticated (Seller+) SQL Injection
Medium
CVE-2024-6168
Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery via AJAX actions
High
CVE-2024-6166
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection
Medium
CVE-2024-5882
Ultimate Classified Listings <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2023-7062
Advanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-3228
Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure
High
CVE-2024-6309
Attachment File Icons (AF Icons) <= 1.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-4483
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6171
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass
High
CVE-2024-6123
Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2024-5793
Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection
High
CVE-2024-6316
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2024-6317
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion
Medium
CVE-2024-5855
Media Hygiene <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion
Medium
CVE-2024-5600
Happy SCSS Compiler - Compile SCSS to CSS automatically <= 1.3.10 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-5946
Squelch Tabs and Accordions Shortcodes <= 0.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via tab Shortcode
High
CVE-2023-7061
Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-5285
WP Affiliate Platform <= 6.5.1 - Cross-Site Request Forgery to Afilliate Deletion
Medium
CVE-2024-5704
XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-5883
Ultimate Classified Listings <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-6167
Just Custom Fields <= 3.3.2 - Missing Authorization via AJAX actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.