Medium
CVE-2024-8913
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-9065
WP Helper Premium <= 4.6.1 - Missing Authorization in whp_smtp_send_mail_test
Medium
CVE-2024-8477
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery
High
CVE-2024-48029
SB Random Posts Widget <= 1.0 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-48030
Telecash Ricaricaweb <= 2.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-48026
Disc Golf Manager <= 1.0.0 - Unauthenticated PHP Object Injection
High
CVE-2024-9575
pretix widget <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-48033
Talkback <= 1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-48024
Keep Backup Daily <= 2.0.8 - Unauthenticated Information Disclosure
Medium
CVE-2024-48040
Tainacan <= 0.21.8 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-48028
IP Loc8 <= 1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-8488
Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-4534
Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass
High
CVE-2024-45293
PHPSpreadsheet Library < 2.3.0 - XXE Injection
Medium
CVE-2024-9417
Hash Form - Drag & Drop Form Builder <= 1.1.9 - Unauthenticated Limited File Upload
High
CVE-2024-9314
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2024-9161
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete
High
CVE-2024-8352
Social Web Suite – Social Media Auto Post, Social Media Auto Publish <= 4.1.11 - Directory Traversal to Arbitrary File Download
Medium
CVE-2024-9210
MC4WP: Mailchimp Top Bar <= 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-8254
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-9222
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-9225
SEOPress – On-site SEO <= 8.1.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-9289
WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege Escalation
Medium
CVE-2024-47387
Search Atlas SEO <= 1.8.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.