High
CVE-2024-6589
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-6571
Optimize Images ALT Text (alt tag) & names for SEO using AI <= 3.1.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6553
WP Meteor Website Speed Optimization Addon <= 3.4.3 - Unauthenticated Full Path Disclosure
High
CVE-2024-6828
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting
Medium
CVE-2024-38791
AI Engine <= 2.4.7 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2024-39621
ListingPro Plugin <= 2.9.4 - Authenticated (Author+) Local File Inclusion
Medium
CVE-2024-39630
Timetable and Event Schedule <= 2.4.13 - Authenticated (Admin+) PHP Object Injection
High
CVE-2024-39624
ListingPro <= 2.9.4 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2024-6724
Generate Images – Magic Post Thumbnail <= 5.2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-39619
ListingPro Plugin <= 2.9.4 - Unauthenticated Local File Inclusion
Medium
CVE-2024-38792
Language Translate Widget for WordPress – ConveyThis <= 234 - Missing Authorization to Limited Option Update
Medium
CVE-2024-38790
Smartsupp – live chat, chatbots, AI and lead generation <= 3.6 - Cross-Site Request Forgery
Medium
CVE-2024-6491
Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update
Medium
CVE-2024-3934
Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2024-6489
Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update
High
CVE-2024-38775
CTX Feed <= 6.5.6 - Authenticated (Shop Manager+) Arbitrary Options Update
Medium
CVE-2024-6560
Addonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure
Medium
CVE-2024-38771
Atarim <= 4.0 - Missing Authorization
Critical
CVE-2024-6636
WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation
High
CVE-2024-38772
JetWidgets for Elementor and WooCommerce <= 1.1.7 - Authenticated (Contributor+) Limited Local File Inclusion
High
CVE-2024-6635
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass
Medium
CVE-2024-38776
WP GoToWebinar <= 15.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Low
CVE-2024-6694
WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure
High
CVE-2024-6637
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.