Medium
CVE-2024-12059
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-54274
WordPress HelpDesk & Support Ticket System Plugin – Octrace Support <= 1.2.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-54284
SeedProd Pro <= 6.18.12 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-12255
Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure
Medium
CVE-2024-54366
Vimeography <= 2.4.4 - Sensitive Information Exposure
High
CVE-2024-54292
Appsplate <= 2.1.3 - Unauthenticated SQL Injection
Medium
CVE-2024-54304
Hive Support – WordPress Help Desk <= 1.1.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-54280
WPBookit <= 1.6.0 - Unauthenticated SQL Injection
Medium
CVE-2024-54271
WPCargo Track & Trace <= 8.0.1 - Missing authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-11181
Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11351
Restrict – membership, site, content and user access restrictions for WordPress <= 2.2.8 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-12294
Last Viewed Posts by WPBeginner <= 1.0.1 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-11008
Members <= 3.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-11106
Simple Restrict <= 1.2.7 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-11868
LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API
Medium
CVE-2025-24567
WP Mailster <= 1.8.16.0 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-12270
Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection
Medium
CVE-2024-8679
Library Management System <= 3.1 - Authenticated (Admin+) SQL Injection
High
CVE-2024-54261
TAX SERVICE Electronic HDM <= 1.1.2 - Unauthenticated SQL Injection
High
CVE-2024-11460
Verowa Connect <= 3.0.1 - Unauthenticated SQL Injection
Medium
CVE-2024-11292
WP Private Content Plus <= 3.6.1 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
High
CVE-2024-10247
YouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-10689
XLTab – Accordions and Tabs for Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10692
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.8.1 - Authenticated (Contributor+) Post Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.