Medium
CVE-2024-9417
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2024-9204
Smart Custom 404 Error Page <= 11.4.7 - Reflected Cross-Site Scripting
High
CVE-2024-8352
Social Web Suite – Social Media Auto Post, Social Media Auto Publish <= 4.1.11 - Directory Traversal to Arbitrary File Download
High
CVE-2024-7855
WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-47351
MaxSlider <= 1.2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-47645
Top Bar – PopUps – by WPOptin <= 2.0.1 - Unauthenticated Local File Inclusion
High
CVE-2024-47649
Iconize <= 1.2.4 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2024-9224
Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read
Critical
CVE-2024-9108
Wechat Social login <= 1.3.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-8712
GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting
High
CVE-2024-7149
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-47324
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-47323
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Unauthenticated Local File Inclusion
High
CVE-2024-47309
Cities Shipping Zones for WooCommerce <= 1.2.7 - Authenticated (Shop Manager+) Local File Inclusion
High
CVE-2024-47319
Bit Form – Contact Form Plugin <= 2.13.10 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2024-8126
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-8704
Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
Critical
CVE-2024-44014
Vmax Project Manager <= 1.0 - Unauthenticated Local File Inclusion
Critical
CVE-2024-44011
WP Ticket Ultra Help Desk & Support Plugin <= 1.0.5 - Unauthenticated Local File Inclusion
Medium
CVE-2024-9146
CSS JS Files <= 1.5.0 - Authenticated (Admin+) Arbitrary File Read
Critical
CVE-2024-44012
WP Newsletter Subscription <= 1.1 - Unauthenticated Local File Inclusion
High
CVE-2024-44030
Checkout Mestres WP <= 8.6 - Authenticated (Admin+) Local File Inclusion
Critical
CVE-2024-44013
VR Calendar <= 2.4.4 - Unauthenticated Local File Inclusion
Critical
CVE-2024-44017
MH Board <= 1.3.2.1 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.