Critical
CVE-2024-44016
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-44034
WPSPX <= 1.0.2 - Unauthenticated Local File Inclusion
Critical
CVE-2024-44019
Contact Form 7 Campaign Monitor Extension <= 0.4.67 - Missing Authorization to Unauthenticated Arbitrary File Deletion
Critical
CVE-2024-44015
Users Control <= 1.0.16 - Unauthenticated Local File Inclusion
Critical
CVE-2024-44018
Instant Chat Floating Button for WordPress Websites <= 1.0.5 - Unauthenticated Local File Inclusion
Critical
CVE-2024-44023
ABCApp Creator <= 1.1.2 - Unauthenticated Local File Inclusion
Critical
CVE-2024-8671
WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite
High
CVE-2024-6486
ImageMagick Engine <= 1.7.10 - Authenticated (Administrator+) Remote Code Execution
High
CVE-2024-44048
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2022-3459
WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding
Medium
CVE-2024-8242
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload
High
CVE-2024-7626
WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) <= 1.6.9 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Read
High
CVE-2024-7770
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-7622
Revision Manager TMC <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Medium
CVE-2024-7620
Customizer Export/Import <= 0.9.7 - Authenticated (Admin+) Arbitrary File Upload via Customization Settings Import
High
CVE-2024-7627
Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition
Critical
CVE-2024-7950
WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation
Medium
CVE-2024-8031
Secure Downloads <= 1.2.2 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-8104
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2024-5053
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification
High
CVE-2024-8252
Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43989
Justified Image Grid <= 4.6.1 - Unauthenticated Server-Side Request Forgery
High
CVE-2024-6311
Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2025-52758
Zippy <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.