Medium
CVE-2024-9262
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-10261
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution
Critical
CVE-2024-10508
RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery
Critical
CVE-2024-10589
Leopard <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2024-8756
Quform - WordPress Form Builder <= 2.20.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-9226
Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.6 - Reflected Cross-Site Scripting
High
CVE-2024-10673
Top Store <= 1.5.4 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Critical
CVE-2024-51793
Computer Repair Shop <= 3.8115 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-51890
Geoportail Shortcode <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10876
Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-10284
CE21 Suite <= 2.2.0 - Authentication Bypass
Critical
CVE-2024-10871
Category Ajax Filter <= 2.8.2 - Unauthenticated Local File Inclusion
Critical
CVE-2024-9307
mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files
High
CVE-2024-10028
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log
High
CVE-2024-9946
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.13.68 - Authentication Bypass via Disqus OAuth provider
Medium
CVE-2024-10471
Everest Forms <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-10020
Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider
Medium
CVE-2024-10535
Video Gallery for WooCommerce <= 1.31 - Missing Authorization to Unauthenticated Limited File Deletion
Medium
CVE-2024-51783
Forms: 3rd-Party Post Again <= 0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-7056
WPForms <= 1.9.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-10114
Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider
High
CVE-2024-10097
Loginizer Security and Loginizer <= 1.9.2 - Authentication Bypass via WordPress.com OAuth provider
Medium
CVE-2024-51776
Daily Image <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9896
BBP Core – Expand bbPress powered forums with useful features <= 1.2.5 - Reflected Cross-Site Scripting via add_query_arg Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.