Critical
CVE-2024-44023
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-8914
Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-44037
Multipurpose Ticket Booking Manager <= 4.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-8795
BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover
High
CVE-2022-2439
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2024-8628
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.70.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2023-5359
W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext
Critical
CVE-2024-8791
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation
Medium
CVE-2024-8680
MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-8850
MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting
Critical
CVE-2024-8853
Webo-facto <= 1.40 - Unauthenticated Privilege Escalation
High
CVE-2024-22303
Houzez <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-45453
Maintenance Redirect <= 2.0.1 - IP Spoofing to Maintenance Mode Bypass
High
CVE-2024-44048
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-8490
PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details
Medium
CVE-2024-8724
Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-8860
Tourfic <= 2.14.5 - Missing Authorization in Multiple Functions
Medium
CVE-2024-6544
Custom Post Limits <= 4.4.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-8747
Email Obfuscate Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8242
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload
Medium
CVE-2024-8737
PDF Thumbnail Generator <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-7888
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization
Medium
CVE-2024-8664
WP Test Email <= 1.1.7 - Reflected Cross-Site Scripting
High
CVE-2022-2446
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.