Critical
CVE-2024-50494
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-9932
Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-50495
Plugin Propagator <= 0.1 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-50498
WP Query Console <= 1.0 - Unauthenticated Remote Code Execution
Critical
CVE-2024-50497
Advanced Online Ordering and Delivery Platform <= 2.0.0 - Unauthenticated Local File Inclusion
High
CVE-2024-50480
Marketing Automation by AZEXO <= 1.27.80 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-50493
Automatic Translation <= 1.0.4 - Unauthenticated Arbitrary File Upload
High
CVE-2024-8392
WordPress Post Grid Layouts with Pagination – Sogrid <= 1.5.6 - Authenticated (Admin+) Local File Inclusion
Critical
CVE-2024-50473
Ajar in5 Embed <= 3.1.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-50482
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-50492
ScottCart <= 1.1 - Unauthenticated Remote Code Execution
Critical
CVE-2024-50484
Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-50496
AR For WordPress <= 6.6 - Unauthenticated Arbitrary File Upload
High
CVE-2024-10011
BuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal
Critical
CVE-2024-50434
NewsCard <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2024-50457
Qode Essential Addons <= 1.6.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-9598
AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalation
Critical
CVE-2024-50436
Clean Retina <= 3.0.6 - Unauthenticated Local File Inclusion
Critical
CVE-2024-50435
Meta News <= 1.1.7 - Unauthenticated Local File Inclusion
Critical
CVE-2024-50420
aDirectory <= 1.3 - Unauthenticated Arbitrary File Upload
High
CVE-2024-50453
The Pack Elementor addons <= 2.0.9 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-50427
SurveyJS: Drag & Drop WordPress Form Builder <= 1.9.136 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-9835
RSS Feed Widget <= 3.0.0 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI']
High
CVE-2024-49669
INK Official <= 4.1.2 - Authenticated (Contributor+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.