Critical
CVE-2024-49285
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-9652
Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scripting
Medium
CVE-2024-49281
Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-49315
FREE DOWNLOAD MANAGER <= 1.0.0 - Unauthenticated Arbitrary File Download
Critical
CVE-2024-49318
My Reading Library <= 1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-9104
UltimateAI <= 2.8.3 - Limited User Password Change due to Improper Empty and Missing Default Value Check
High
CVE-2024-49305
Email Verification for WooCommerce <= 2.8.10 - Unauthenticated SQL Injection
Critical
CVE-2024-9893
Nextend Social Login Pro <= 3.1.14 - Authentication Bypass via WordPress.com OAuth provider
Medium
CVE-2024-9546
WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure
Medium
CVE-2024-49258
WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2024-49252
Leyka <= 3.31.6 - Missing Authorization
High
CVE-2024-49251
Maan Addons For Elementor <= 1.0.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-49243
Dynamic Elementor Addons <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-49245
Ahime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Download
High
CVE-2024-49227
Free Stock Photos Foter <= 1.5.4 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2024-49226
TAKETIN To WP Membership <= 2.8.12 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-49218
Recently <= 1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-8760
Stackable – Page Builder Gutenberg Blocks <= 3.13.6 - Unauthenticated CSS Injection
Medium
CVE-2024-7489
Forms for Mailchimp by Optin Cat <= 2.5.7 - Authenticated (Editor+) Stored Cross-Site Scripting via Form Color Parameters
Medium
CVE-2024-7514
WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal
Medium
CVE-2024-9507
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read
Medium
CVE-2024-9586
Linkz.ai <= 1.1.8 - Missing Authorization to Unauthenticated Plugin Settings Update
Medium
CVE-2024-9587
Linkz.ai <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update via AJAX
Medium
CVE-2024-9221
Tainacan <= 0.21.10 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.