Critical
CVE-2024-25600
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-25911
MoveTo <= 6.2 - Unauthenticated Directory Traversal to Arbitrary File Deletion
Critical
CVE-2024-25096
Canto <= 3.0.6 - Remote File Inclusion to Code Execution
Medium
CVE-2024-25915
Pexels: Free Stock Photos <= 1.2.2 - Authenticated (Contributor+) Server-Side Request Forgery
Critical
CVE-2024-25913
MoveTo <= 6.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-1350
Honeypot for WP Comment <= 2.2.3 - Directory Traversal to Unauthenticated Arbitrary File Deletion
High
CVE-2024-0842
Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service
Low
CVE-2024-0628
WP RSS Aggregator <= 4.23.5 - Authenticated (Admin+) Server-Side Request Forgery via RSS Feed Source
Critical
CVE-2023-6989
Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion
Medium
CVE-2024-24835
BEAR <= 1.1.4 - Missing Authorization via Several Functions
Medium
CVE-2024-24834
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
Medium
CVE-2024-0844
Popup More <= 2.2.4 - Authenticated (Admin+) Directory Traversal to Limited Local File Inclusion
High
CVE-2024-23825
TablePress <= 2.2.4 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files
Medium
CVE-2024-24714
Icons Font Loader <= 1.1.4 - Authenticated(Administrator+) Arbitrary File Upload
High
CVE-2024-1069
Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2024-0697
Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversal
High
CVE-2023-6846
File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-0221
Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename
Medium
CVE-2024-0699
AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url
Medium
CVE-2023-6294
Popup Builder <= 4.2.5 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2023-6925
Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2024-0380
WP Recipe Maker <= 9.1.0 - Directory Traversal
High
CVE-2024-22152
Product Import Export for WooCommerce <= 2.3.7 - Authenticated(Shop Manager+) Arbitrary File Upload via upload_import_file
High
CVE-2024-22135
Order Export & Order Import for WooCommerce <= 2.4.3 - Authenticated (Shop Manager+) Arbitrary File Upload via upload_import_file
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.