Critical
CVE-2024-7854
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2024-7702
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function
High
CVE-2024-7780
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-7827
Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter
Medium
CVE-2024-43283
Contest Gallery <= 23.1.2 - Unauthenticated Information Exposure
Medium
CVE-2024-43289
wpForo Forum <= 2.3.4 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-43282
Tutor LMS <= 2.7.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-43343
Order Tracking <= 3.3.11 - Missing Authorization via send_test_email()
High
CVE-2023-3416
tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-43319
Flash & HTML5 Video <= 2.5.31 - Authenticated (Subscriber+) Information Exposure
High
CVE-2023-3419
tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-7630
Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure
Medium
CVE-2024-7063
ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-7786
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.1 - Unauthenticated Email Template Disclosure
Medium
CVE-2024-43251
Bit Form Pro <= 2.6.4 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-43264
Create by Mediavine <= 1.9.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-43258
Store Locator Plus <= 2311.17.01 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-43265
Analytify <= 5.3.1 - Cross-Site Request Forgery to Opt-out
Medium
CVE-2024-43259
Order Export for WooCommerce <= 3.23 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-43257
Leopard - WordPress offload media <= 2.0.36 - Authenticated (Subscriber+) Sensitive Information Exposure
Critical
CVE-2024-6928
Opti Marketing <= 2.0.9 - Unauthenticated SQL Injection
Critical
CVE-2024-6924
TrueBooker <= 1.0.3 - Unauthenticated SQL Injection
Medium
CVE-2024-43230
Shared Files <= 1.7.28 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1286
Paid Memberships Pro - Membership Maps Add On < 0.7 - Authenticated (contributor+) Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.