Critical
CVE-2024-56205
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-56068
WP SuperBackup <= 2.3.3 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-56061
Computer Repair Shop <= 3.8119 - Authenticated (Customer+) Privilege Esclation via Account Takeover
Medium
CVE-2024-12554
Peter’s Custom Anti-Spam <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function
Medium
CVE-2024-12250
Accept Authorize.NET Payments Using Contact Form 7 <= 2.2 - Unauthenticated Information Exposure
Medium
CVE-2024-56030
10CentMail <= 2.1.50 - Reflected Cross-Site Scripting
Critical
CVE-2024-56058
VRPConnector <= 2.0.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-11291
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Critical
CVE-2024-56043
WPLMS <= 1.9.9 - Unauthenticated Privilege Escalation
Critical
9f5cdb47-205a-4c03-a8a9-f39d1b4fc769
Agency Toolkit <= 1.0.23 - Missing Authorization to Unauthenticated Arbitrary Options Update
High
CVE-2024-12259
CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation
High
CVE-2024-56048
WPLMS <= 1.9.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Critical
CVE-2024-56059
Partners <= 0.2.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-24576
Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.7 - Reflected Cross-Site Scripting
Critical
CVE-2024-12287
Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_user
High
CVE-2024-12024
EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name
Low
CVE-2024-9654
Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass
Medium
CVE-2024-12302
Icegram Engage <= 3.1.31 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-12311
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.43 - Authenticated (Admin+) SQL Injection
High
CVE-2024-8326
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-12601
Calculated Fields Form <= 5.2.63 - Denial of Service
Medium
CVE-2024-56003
Caldera SMTP Mailer <= 1.0.1 - Missing Authorization
High
CVE-2024-56012
Flash News / Post (Responsive) <= 4.1 - Cross-Site Request Forgery to Privilege Escalation
High
CVE-2024-56013
Wovax IDX <= 1.2.2 - Missing Authorization to Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.