High
CVE-2024-7560
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-43134
Waitlist Woocommerce ( Back in stock notifier ) <= 2.6 - Missing Authorization
High
CVE-2024-43135
WPCafe <= 2.2.28 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-7492
MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2024-6869
Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure
Medium
CVE-2024-6824
Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update
High
CVE-2024-7561
The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-43129
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-43165
WPSection <= 1.3.8 - Authenticated (Contributor+) Local File Inlcusion
Medium
CVE-2024-43126
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.15 - Reflected Cross-Site Scripting
Critical
CVE-2024-43138
Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-43140
Ultimate Bootstrap Elements for Elementor <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-7350
Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover
Medium
CVE-2024-43164
Blockspare <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43141
Participants Database <= 2.5.9.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-43153
Woffice <= 5.4.10 - Unauthenticated Privilege Escalation
High
CVE-2024-43121
HUSKY <= 1.3.6.1 - Authenticated (Shop Manager+) Arbitrary Options Update
Medium
CVE-2024-6722
Chatbot Support AI <= 1.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-5709
WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion
Medium
CVE-2024-6567
Ebook Store <= 5.8001 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-39661
Kubio AI Page Builder <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8542
Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-39657
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.18 - Cross-Site Request Forgery
High
CVE-2024-6698
FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.