High
CVE-2024-7435
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-8252
Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-2694
Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-5879
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget
Medium
CVE-2024-43997
EasyJobs <= 2.4.14 - Reflected Cross-Site Scripting
Critical
CVE-2024-8016
The Events Calendar Pro <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution
Medium
CVE-2024-8319
Tourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple Functions
Medium
CVE-2024-2541
Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File
Medium
CVE-2024-43977
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-43999
Ninja Forms <= 3.8.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-2440
Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2024-43973
GetPaid <= 2.8.11 - Missing Authorization via column_subscription()
Medium
CVE-2024-6551
GiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure
Critical
CVE-2024-8030
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-6448
Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure
Critical
CVE-2024-43965
SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection
Critical
CVE-2024-43931
JobSearch <= 2.5.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-43927
Email Address Encoder <= 1.0.23 - Cross-Site Request Forgery via eae_clear_caches()
Medium
CVE-2024-43944
Maintenance & Coming Soon Redirect Animation <= 2.3.0 - IP Spoofing to Bypass
High
CVE-2024-43957
Animated Number Counters <= 2.1 - Authenticated (Editor+) Local File Inclusion
Medium
CVE-2024-43932
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Missing Authorization
Medium
CVE-2024-43923
Timetics <= 1.0.23 - Authorization Bypass
Medium
CVE-2024-43921
Magic Post Thumbnail <= 5.2.9 - Reflected Cross-Site Scripting
High
CVE-2024-7351
Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.