Medium
CVE-2024-35737
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-1330
Kadence Blocks Pro <= 2.3.7 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2024-35682
Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.11 - Authenticated (Subscriber+) Information Exposure
High
CVE-2024-5329
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
Medium
CVE-2024-0910
Restrict for Elementor <= 1.0.7 - Protection Mechanism Bypass
Critical
CVE-2024-35678
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress <= 1.7.2 - Authenticated (Author+) SQL Injection
High
CVE-2024-4743
LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-5483
LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API
Medium
CVE-2024-5615
Open Graph <= 1.11.2 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-4295
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash
Medium
CVE-2024-6335
Tracking Code Manager <= 2.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-3820
wpDataTables - Tables & Table Charts (Premium) <= 6.3.1 - Unauthenticated SQL Injection
Critical
CVE-2024-3200
wpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-5522
HTML5 Video Player <= 2.5.26 - Unauthenticated SQL Injection
Critical
CVE-2024-35630
WP TripAdvisor Review Slider <= 12.6 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-6159
Push Notification for Post and BuddyPress <= 1.93 - Unauthenticated SQL Injection
High
CVE-2024-4145
Search & Replace <= 3.2.1 - Authenticated (Administrator+) SQL injection
Critical
CVE-2024-3552
Web Directory Free <= 1.6.9 - Unauthenticated SQL Injection
High
CVE-2024-4779
Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]
High
CVE-2024-5207
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-3495
Country State City Dropdown CF7 <= 2.7.2 - Unauthenticated SQL Injection
High
CVE-2024-2088
NextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposure
Critical
CVE-2024-4443
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter
High
CVE-2024-3518
Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.