Critical
CVE-2024-31286
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2024-31250
WP Server Health Stats <= 1.7.3 - Cross-Site Request Forgery
Medium
CVE-2024-31253
OAuth Server <= 4.3.3 - Open Redirect
Medium
CVE-2024-31287
Media Library Folders <= 8.1.8 - Authenticated (Author+) Directory Traversal
High
CVE-2024-31288
RapidLoad Power-Up for Autoptimize <= 2.2.11 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2024-31345
Auto Poster <= 1.2 - Authenticated (Administrator+) Arbitrary File Upload
Critical
CVE-2024-3136
MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template
Critical
CVE-2024-31231
Rehub <= 19.6.1 - Unauthenticated Local File Inclusion
High
CVE-2024-31232
Rehub <= 19.6.1 - Authenticated (Editor+) Local File Inclusion
Medium
CVE-2024-2654
File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal
Medium
CVE-2023-7253
Import WP – Export and Import CSV and XML files to WordPress <= 2.13.0 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2024-3022
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload
Critical
CVE-2024-31114
Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2024-30532
Builderall Builder for WordPress <= 2.0.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-30527
WP Express Checkout (Accept PayPal Payments) <= 2.3.7 - Unauthenticated Price Manipulation
Critical
CVE-2024-31115
Chauffeur Taxi Booking System for WordPress <= 7.2 - Unauthenticated Arbitrary File Upload
High
CVE-2024-2047
ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw
Medium
CVE-2024-24888
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2024-30531
Nelio Content <= 3.2.0 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2023-6999
Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution
Critical
CVE-2024-2411
MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal
High
CVE-2024-30453
Brave Popup Builder <= 0.6.5 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2024-30510
Salon booking system <= 9.5 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-30500
CubeWP – All-in-One Dynamic Content Framework <= 1.1.12 - Authenticated (Subscriber+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.