High
CVE-2024-7112
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2024-7349
LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-6835
Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form
Medium
CVE-2024-8106
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure
High
CVE-2024-7717
WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection
Medium
CVE-2024-43990
Masterstudy LMS Starter <= 1.1.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-2541
Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File
Medium
CVE-2024-7418
The Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure
High
CVE-2024-7607
Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection
Medium
CVE-2024-7857
Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injection
Critical
CVE-2024-43978
Super Store Finder <= 6.9.7 - Unauthenticated SQL Injection
Critical
CVE-2024-43976
Super Store Finder <= 6.9.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-43969
Spiffy Calendar <= 4.9.12 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-8195
Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-43965
SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection
Critical
CVE-2024-43943
Woocommerce Addon by Greenshift< 1.9.8 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-43942
Greenshift Query and Meta Addon < 3.9.2 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-43941
Propovoice Pro <= 1.7.0.3 - Unauthenticated SQL Injection
Critical
CVE-2024-43966
WP Testimonial Widget <= 3.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-7766
Adicon Server <= 1.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-6723
AI Engine <= 2.4.7 - Authenticated (Admin+) SQL Injection
Critical
CVE-2024-43917
TI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection
High
CVE-2024-7384
AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function
Medium
CVE-2024-7651
App Builder – Create Native Android & iOS Apps On The Flight <= 4.3.3 - Unauthenticated Limited SQL Injection via app-builder-search
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.