Critical
CVE-2024-11024
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-53737
WP Mailster <= 1.8.16.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24559
WP Mailster <= 1.8.15.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11265
Wp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure
Medium
CVE-2024-11463
DeBounce Email Validator <= 5.6.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-10961
Social Login <= 5.9.0 - Authentication Bypass via Disqus OAuth provider
Medium
CVE-2024-53708
AI Quiz <= 1.1 - Missing Authorization
Critical
CVE-2024-9511
FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection
High
CVE-2024-11620
Rank Math SEO <= 1.0.231 - .htaccess File Manipulation to Remote Code Execution
High
CVE-2024-10873
LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-10803
MP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download
Medium
CVE-2024-10499
AI Engine <= 2.6.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-8735
MailMunch – Grow your Email List <= 3.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-10518
ProfilePress <= 4.15.14 - Authenticated (Admin+) Stored Cross-Site Scripting via "Product Files"
Medium
CVE-2024-10637
Kadence Blocks <= 3.2.53 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10517
ProfilePress <= 4.15.14 - Authenticated (Admin+) Stored Cross-Site Scripting via "Labels"
Medium
CVE-2024-12581
Kadence Blocks <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-11409
Grid View Gallery <= 1.0 - Authenticated (Editor+) PHP Object Injection
High
CVE-2024-52497
Shopready <= 3.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-10898
Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-52499
Pricing table addon for elementor <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-52498
SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-52496
Absolute Addons For Elementor <= 1.0.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-52503
Tailored Tools <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.