High
CVE-2024-43242
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-7621
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Critical
CVE-2024-7503
WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
Medium
CVE-2024-43227
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43232
Timeline and History slider <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-3673
Web Directory Free <= 1.7.2 - Unauthenticated Local File Inclusion
Medium
CVE-2024-43213
WC Marketplace <= 4.1.17 - Reflected Cross-Site Scripting
Medium
CVE-2024-43214
myCred <= 2.7.2 - Unauthenticated Information Exposure
High
CVE-2024-43221
JetGridBuilder <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-1286
Paid Memberships Pro - Membership Maps Add On < 0.7 - Authenticated (contributor+) Information Disclosure
Medium
CVE-2024-43208
Send Emails with Mandrill <= 1.4.1 - Missing Authorization
Medium
CVE-2024-43211
MailChimp Subscribe Forms <= 4.0.9.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43223
EventPrime <= 4.0.3.2 - Missing Authorization via calendar_event_create()
High
CVE-2024-37099
GiveWP <= 3.14.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-6562
affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure
Medium
CVE-2024-7413
Obfuscate Email <= 3.8.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7382
Linkify Text <= 1.9.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7412
No Update Nag <= 1.4.12 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7416
Reveal Template <= 3.7 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7410
My Custom CSS PHP & ADS <= 3.3 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-4359
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read
Medium
CVE-2024-7414
PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6552
Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure
High
CVE-2024-7486
MultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.