Medium
CVE-2024-55995
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-11712
WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download
Medium
CVE-2024-11710
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection
High
CVE-2024-11711
WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection
Medium
CVE-2024-11714
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()
Medium
CVE-2024-11713
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()
Medium
CVE-2024-11141
Sailthru Triggermail <= 1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-11715
WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation
Medium
CVE-2024-12578
Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure
Medium
CVE-2024-12417
Simple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-11275
WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion
Medium
CVE-2024-54394
Mandrill WP <= 1.0.5 - Cross-Site Request Forgery
High
CVE-2024-10783
MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation
Medium
CVE-2024-54388
Multiple Admin Emails <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54425
LionScripts: Site Maintenance & Noindex Nofollow Plugin <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54414
Geoportail Shortcode <= 2.4.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-12312
Print Science Designer <= 1.3.152 - Unauthenticated PHP Object Injection
High
CVE-2024-11052
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculations
Medium
CVE-2024-11709
AI Post Generator | AutoWriter <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion
High
CVE-2024-11443
de:branding <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2024-54373
EduAdmin Booking <= 5.2.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-54307
AIcomments <= 1.4.1 - Cross-Site Request Forgery
Critical
CVE-2024-54293
CE21 Suite <= 2.2.0 - Unauthenticated Privilege Escalation
Medium
CVE-2024-12441
BP Email Assign Templates <= 1.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.