High
CVE-2024-49681
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-49692
AffiliateX <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-49619
Social Link Groups <= 1.1.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-49618
MyTweetLinks <= 1.1.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-49623
Duplicate Title Validate <= 1.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-49614
SermonAudio Widgets <= 1.9.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-49609
Author Discussion <= 0.2.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-49617
Back Link Tracker <= 1.0.0 - Cross-Site Request Forgery to SQL Injection
High
CVE-2024-49616
Rate Own Post <= 1.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-49620
FERMA.ru.net <= 1.3.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-49612
SW Contact Form <= 1.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2019-25218
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.3 - Authenticated (Admin+) SQL Injection
High
CVE-2024-49613
Simple Code Insert Shortcode <= 1.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-7417
Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure
Medium
CVE-2024-49284
WP SendFox <= 1.3.1 - Unauthenticated Information Disclosure
Medium
CVE-2024-9540
Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template
Medium
CVE-2024-49299
Surfer <= 1.5.0.502 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-49305
Email Verification for WooCommerce <= 2.8.10 - Unauthenticated SQL Injection
Medium
CVE-2024-49297
Zoho CRM Lead Magnet <= 1.7.9.7 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-6757
Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
Medium
CVE-2024-49244
CSV Product Import Export for WooCommerce <= 1.0.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-49224
Mitm Bug Tracker <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-49235
Contact Forms, Live Support, CRM, Video Messages <= 1.10.3 - Unauthenticated Information Disclosure
High
CVE-2024-49246
Ajax Rating with Custom Login <= 1.1 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.