High
CVE-2024-27972
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-27957
Pie Register <= 3.8.3.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-27954
Automatic <= 3.92.0 - Unauthenticated Arbitrary File Download and Server-Side Request Forgery
High
CVE-2024-27964
Zippy <= 1.6.9 - Authenticated (Editor+) Arbitrary File Upload
High
CVE-2024-27951
Multiple Page Generator Plugin – MPG <= 3.4.0 - Authenticated (Editor+) Remote Code Execution
Critical
CVE-2024-22144
Anti-Malware Security and Brute-Force Firewall <= 4.21.96 - Unauthenticated Remote Code Execution
High
CVE-2024-1986
Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-0677
Pz-LinkCard <= 2.5.2 - Sever-Side Request Forgery
High
CVE-2024-1382
Restaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2023-6825
File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
Medium
CVE-2024-27949
Image Optimizer, Resizer and CDN – Sirv <= 7.2.0 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2024-1468
Avada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-1978
Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgery
High
CVE-2023-40000
LiteSpeed Cache <= 5.7 - Unauthenticated Stored Cross-Site Scripting via 'nameservers' and '_msg'
Medium
CVE-2024-1568
Seraphinite Accelerator <= 2.20.52 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck
High
CVE-2024-27191
Slivery Extender <= 1.0.2 - Authenticated(Contributor+) Remote Code Execution via shortcode
High
CVE-2024-1311
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-1165
Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-1758
SuperFaktura WooCommerce <= 1.40.3 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
High
CVE-2024-1358
Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion
High
CVE-2024-25909
WP Media folder <= 5.7.2 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-25925
WooCommerce Easy Checkout Field Editor, Fees & Discounts <= 3.5.12 - Unauthenticated Arbitrary File Upload
High
CVE-2024-25918
InstaWP Connect <= 0.1.0.8 - Authenticated (Subscriber+) Remote Code Execution
High
CVE-2024-24707
Cwicly <= 1.4.0.2 - Authenticated (Contributor+) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.