High
CVE-2024-0702
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-1288
Schema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modification
Medium
CVE-2024-0656
Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-1586
Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting
Medium
CVE-2024-1496
Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url
High
CVE-2024-1217
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation
Medium
CVE-2024-1408
ProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via [edit-profile-text-box] shortcode
Medium
CVE-2024-1519
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1570
ProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1492
WPify Woo Czech <= 4.0.8 - Missing Authorization
Medium
CVE-2024-1475
Coming Soon Maintenance Mode <= 1.0.5 - Information Exposure
Medium
CVE-2024-1559
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2024-1068
404 Solution <= 2.35.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-6444
Seriously Simple Podcasting <= 2.25.3 - Unauthenticated Email Disclosure
Critical
CVE-2024-0610
Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injection
Critical
CVE-2024-1512
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection
Medium
CVE-2024-0590
Microsoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-1445
Page scroll to id <= 1.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1279
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) Information Disclosure via Shortcode
Medium
CVE-2024-0978
My Private Site <= 3.0.14 - Improper Access Control to Sensitive Information Exposure via REST API
Medium
CVE-2024-1472
WP Maintenance <= 6.1.6 - Information Exposure
Medium
CVE-2024-1277
Ocean Extra <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-25909
WP Media folder <= 5.7.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-1411
PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.