High
CVE-2024-7484
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-7257
YayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function
Critical
CVE-2024-39651
WooCommerce PDF Vouchers <= 4.9.4 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-2090
Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2024-7135
Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2024-6451
AI Engine <= 2.5.0 - Authenticated (Admin+) Remote Code Execution
High
CVE-2024-39637
Edubin <= 9.2.0 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2024-6330
GEO my WordPress <= 4.5.0.1 - Unauthenticated Local File Inclusion
Critical
CVE-2024-6459
News Element Elementor Blog Magazine <= 1.0.5 - Unauthenticated Local File Inlcusion
Critical
CVE-2024-6460
Grow by Tradedoubler <= 2.0.21 - Unauthenticated Local File Inclusion
High
CVE-2024-6431
Media.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-6589
LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-6756
Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-5744
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI']
High
CVE-2024-6885
MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles <= 1.9.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2024-38791
AI Engine <= 2.4.7 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2024-39621
ListingPro Plugin <= 2.9.4 - Authenticated (Author+) Local File Inclusion
High
CVE-2024-39624
ListingPro <= 2.9.4 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2024-39619
ListingPro Plugin <= 2.9.4 - Unauthenticated Local File Inclusion
Medium
CVE-2024-3934
Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2024-38772
JetWidgets for Elementor and WooCommerce <= 1.1.7 - Authenticated (Contributor+) Limited Local File Inclusion
Low
CVE-2024-6694
WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure
High
CVE-2024-3242
Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload
Critical
CVE-2024-6220
简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.