Medium
CVE-2024-6687
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-6770
Lifetime free Drag & Drop Contact Form Builder for WordPress VForm <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-7135
Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2024-2508
WP Mobile Menu <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification
Critical
CVE-2024-6847
Chatbot with ChatGPT <= 2.4.4 - Unauthenticated SQL Injection
High
CVE-2024-6451
AI Engine <= 2.5.0 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2024-8492
Hustle <= 7.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-39636
Better Find and Replace <= 1.6.1 - Unauthenticated PHP Object Injection
Critical
CVE-2024-6330
GEO my WordPress <= 4.5.0.1 - Unauthenticated Local File Inclusion
High
CVE-2024-6843
Chatbot with ChatGPT <= 2.4.4 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2024-6459
News Element Elementor Blog Magazine <= 1.0.5 - Unauthenticated Local File Inlcusion
Medium
CVE-2024-6566
Aramex Shipping WooCommerce <= 1.1.21 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6546
One Click Close Comments <= 2.7.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6591
Ultimate WordPress Auction Plugin <= 4.2.7 - Missing Authorization to Unauthenticated Email Creation
Medium
CVE-2024-6549
Admin Post Navigation <= 2.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6545
Admin Trim Interface <= 3.5.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6573
Intelligence <= 1.4.0 - Unauthenticated Full Path Disclosure
High
CVE-2024-6152
Flipbox Builder <= 1.5 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-6548
Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure
Medium
CVE-2024-6547
Add Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosure
Medium
CVE-2024-6569
Campaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path Disclosure
Critical
CVE-2024-6460
Grow by Tradedoubler <= 2.0.21 - Unauthenticated Local File Inclusion
High
CVE-2024-6431
Media.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-39628
Ninja Forms <= 3.8.6 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.