Medium
CVE-2024-48043
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2024-8757
Boost Your Blog's Engagement with WP Post Author <= 3.8.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-8902
Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections
High
CVE-2024-9201
SEUR Oficial <= 2.2.10.2 - Unauthenticated SQL Injection
Medium
CVE-2024-9538
ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template
Medium
CVE-2024-8913
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template
High
CVE-2024-9022
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter
Medium
CVE-2024-48024
Keep Backup Daily <= 2.0.8 - Unauthenticated Information Disclosure
Medium
CVE-2024-48040
Tainacan <= 0.21.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-48020
Backup and Staging by WP Time Capsule <= 1.22.21 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-9209
WP Search Analytics <= 1.4.10 - Reflected Cross-Site Scripting
High
CVE-2024-9018
WP Easy Gallery <= 4.8.5 - Authenticated (Contributor+) SQL Injection via key Parameter
High
CVE-2024-47350
YITH WooCommerce Ajax Search <= 2.8.0 - Unauthenticated SQL Injection
Medium
CVE-2024-8625
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.3.9 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-8712
GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting
High
CVE-2024-9130
GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter
Medium
CVE-2024-47334
Zoho Flow for WordPress <= 2.8.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-47335
Bit Form – Contact Form Plugin <= 2.13.11 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-47338
WPExperts Square For GiveWP <= 1.3 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-47331
Multi Step for Contact Form <= 2.7.7 - Unauthenticated SQL Injection
Medium
CVE-2024-8771
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-47325
Multiple Page Generator Plugin – MPG <= 3.4.7 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-47304
Fluent Support <= 1.8.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-47328
Automation By Autonami <= 3.1.2 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.