High
CVE-2024-6310
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-6314
IQ Testimonials <= 2.2.7 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-6365
Product Table by WBW <= 2.0.1 - Unauthenticated Remote Code Execution
Critical
CVE-2024-6313
Gutenberg Forms <= 2.2.9 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-5882
Ultimate Classified Listings <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2023-7062
Advanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory Traversal
High
CVE-2024-6309
Attachment File Icons (AF Icons) <= 1.3 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2024-6123
Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2024-6316
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2023-7061
Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2024-5441
Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-6161
Default Thumbnail Plus <= 1.0.2.3 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-6584
Jetpack Boost <= 3.4.6 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2024-37513
WPCafe <= 2.2.27 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-37520
ShopBuilder – Elementor WooCommerce Builder Addons <= 2.1.12 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-37499
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-37497
JetThemeCore for Elementor <= 2.2.0 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2024-37418
Church Admin <= 4.4.6 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-37501
Advanced Classifieds & Directory Pro <= 3.1.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-2385
Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets
High
CVE-2024-6319
IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload'
Low
CVE-2024-6434
Premium Addons for Elementor <= 4.10.35 - Regular Expressions Denial of Service
High
CVE-2024-6318
IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'
Medium
CVE-2024-37479
LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion via 'progress_type'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.