Medium
CVE-2024-50516
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-50514
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.17 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-50507
DS.DownloadList <= 1.3 - Unauthenticated PHP Object Injection
Medium
3a7e8afa-d250-41b1-aa34-555fb458e359
Jetpackcrm Ext Woo Connect < 2.13 - Sensitive Information Exposure
Medium
CVE-2024-50515
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.17 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-24745
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-9501
Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider
High
CVE-2024-9637
School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation
Medium
CVE-2024-8870
Forms for Mailchimp by Optin Cat – Grow Your MailChimp List <= 2.5.7 - Reflected Cross-Site Scripting
Critical
CVE-2024-50476
GRÜN spendino Spendenformular <= 1.0.1 - Unauthenticated Arbitrary Options Update
Critical
CVE-2024-50490
PegaPoll <= 1.0.2 - Unauthenticated Arbitrary Options Update
Critical
CVE-2024-50485
Exam Matrix <= 1.5 - Unauthenticated Privilege Escalation
Critical
CVE-2024-9930
Extensions by HocWP Team <= 0.2.3.2 - Authentication Bypass
Critical
CVE-2024-50497
Advanced Online Ordering and Delivery Platform <= 2.0.0 - Unauthenticated Local File Inclusion
Critical
CVE-2024-50483
Meetup <= 0.1 - Authentication Bypass via Account Takeover
High
CVE-2024-8392
WordPress Post Grid Layouts with Pagination – Sogrid <= 1.5.6 - Authenticated (Admin+) Local File Inclusion
Critical
CVE-2024-50475
Signup Page <= 1.0 - Unauthenticated Arbitrary Options Update
Critical
CVE-2024-50478
1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover
Critical
CVE-2024-50484
Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-50456
SEOPress <= 8.1.1 - Missing Authorization
Medium
CVE-2024-50454
SEOPress <= 8.1.1 - Missing Authorization
Critical
CVE-2024-50434
NewsCard <= 1.3 - Unauthenticated Local File Inclusion
Medium
CVE-2024-50459
WordPress Stripe Donation and Payment Plugin <= 3.2.3 - Missing Authorization
High
CVE-2024-9235
Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.