High
CVE-2024-52501
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-10785
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10365
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Critical
CVE-2024-52475
Wawp < 3.0.18 - Unauthenticated Privilege Escalation
Medium
CVE-2024-8726
MailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-10708
System Dashboard <= 2.8.14 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2024-10520
WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion
High
CVE-2024-10913
Clone <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace'
High
CVE-2024-11036
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings
Medium
CVE-2024-11195
Email Subscription Popup <= 1.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcode
Medium
CVE-2024-10486
Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File
High
CVE-2024-52445
QRMenu Restaurant QR Menu Lite <= 1.0.3 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2024-52443
Geolocator <= 1.1 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52440
Xpresslane Fast Checkout <= 1.0.0 - Unauthenticated PHP Object Injection
High
CVE-2024-52450
nBlocks <= 1.0.2 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-52449
Bootscraper <= 3.0.0 - Unauthenticated Local File Inclusion
High
CVE-2024-52481
Jobify - Job Board WordPress Theme < 4.3.0 - Unauthenticated Arbitrary File Read
Medium
CVE-2024-52467
AI Responsive Gallery Album <= 1.4 - Reflected Cross-Site Scripting
Critical
CVE-2024-52442
UserPlus <= 2.0 - Privilege Escalation
High
CVE-2024-52438
de:branding <= 1.0.2 - Privilege Escalation
High
CVE-2024-52448
Ultimate Classified Listings <= 1.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-52462
WP e-Commerce Style Email <= 0.6.2 - Reflected Cross-Site Scripting
Critical
CVE-2024-52439
Team Rosters <= 4.8.2 - Unauthenticated PHP Object Injection
Medium
CVE-2024-52463
Post By Email <= 1.0.4b - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.