High
CVE-2024-11323
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-54259
DELUCKS SEO <= 2.5.8 - Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2024-11178
Login With OTP <= 1.4.2 - Authentication Bypass via Weak OTP
High
CVE-2024-11289
Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion
High
CVE-2024-54234
Limit Login Attempts <= 5.5 - Unauthenticated SQL Injeciton
Medium
CVE-2024-11223
WPForms <= 1.9.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-10516
Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
High
CVE-2024-54225
Designer <= 1.4.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-11429
Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-11935
Email Address Obfuscation <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter
Medium
CVE-2024-11854
Listdom – Business Directory and Classified Ads Listings WordPress Plugin <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Parameter
High
CVE-2024-10587
Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-12099
Dollie Hub – Build Your Own WordPress Cloud Platform <= 6.2.0 - Authenticated (Contributor+) Post Disclosure
High
CVE-2024-11643
Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update
High
CVE-2024-11952
Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusion
Medium
CVE-2024-5020
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Critical
CVE-2024-43222
Sweet Date <= 3.7.3 - Unauthenticated Privilege Escalation
High
CVE-2024-11293
Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Social Sites Login <= 1.7.9 - Authentication Bypass via WordPress.com OAuth provider
Medium
CVE-2024-11326
Campaign Monitor Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-11782
WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-54219
AIO Contact <= 2.8.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-53804
WP Mailster <= 1.8.16.0 - Unauthenticated Information Exposure
Medium
CVE-2024-53823
The Plus Addons for Elementor Page Builder Lite <= 5.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-53811
WDesignkit <= 1.0.40 - Authenticated (Administrator+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.