Critical
CVE-2024-10571
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2024-52407
BasePress Migration Tools <= 1.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-52406
CSV to html <= 3.26 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-52400
Gallerio <= 1.01 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-52404
CF7 Reply Manager <= 1.2.3 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-52399
Writer Helper <= 3.1.6 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-52397
Convert Docx2post <= 1.4 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2024-52398
CDI <= 5.5.3 - Authenticated (Shop Manager+) Arbitrary File Upload
High
CVE-2024-52408
Push Notifications for WordPress by PushAssist <= 3.0.8 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-52405
B-Banner Slider <= 1.1 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-52403
User Management <= 1.1 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-10828
Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details
High
CVE-2024-10629
GPX Viewer <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File Creation
Critical
CVE-2024-10820
WooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-11150
WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletion
High
CVE-2024-10816
LUNA RADIO PLAYER <= 6.24.01.24 - Unauthenticated Arbitrary File Read
Low
CVE-2024-10672
Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion
High
CVE-2024-52370
Hive Support – WordPress Help Desk <= 1.1.1 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-52378
DigiPass <= 0.3.0 - Unauthenticated Arbitrary File Download
High
CVE-2024-52369
KBucket <= 4.2.2 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-52385
Team Member <= 7.4 - Authenticated (Editor+) Local File Inclusion
Critical
CVE-2024-52375
Datasets Manager by Arttia Creative <= 1.5 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-52381
ZIJ KART <= 1.1 - Unauthenticated Local File Inclusion
Critical
CVE-2024-52374
Do That Task <= 1.5.5 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.