Critical
CVE-2024-11281
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-12850
Database Backup and check Tables Automated With Scheduler 2024 <= 2.32 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2024-11636
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Text Block
Medium
CVE-2024-12566
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12568
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Workflow Settings
Medium
CVE-2024-12567
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Form Settings
Medium
CVE-2024-11896
Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12266
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.7 - Missing Authorization
Medium
CVE-2025-24598
WP Mailster <= 1.8.17.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11852
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization
Medium
CVE-2024-12875
Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-12721
Custom Product Tabs For WooCommerce <= 1.2.4 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2024-11811
Feedify – Web Push Notifications <= 2.4.2 - Reflected Cross-Site Scripting
Critical
CVE-2024-11350
AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover
Medium
CVE-2024-9503
Maintenance & Coming Soon Redirect Animation <= 2.1.3 - Missing Authorization to Settings Update
High
CVE-2024-56213
Eventin <= 4.0.7 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-56216
Themify Builder <= 7.6.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-56208
NewsDaily <= 1.0.64 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-56230
Dynamic Product Category Grid, Slider for WooCommerce <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-56225
Premium Addons for Elementor <= 4.10.56 - Missing Authorization
Critical
CVE-2024-12571
Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion
Critical
CVE-2024-56214
Userpro <= 5.1.9 - Unauthenticated Local File Inclusion
Critical
CVE-2024-12626
AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Medium
CVE-2024-10548
WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.