Medium
CVE-2023-6325
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-4471
140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-2861
ProfilePress <= 4.15.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ProfilePress User Panel Widget
High
CVE-2024-2038
Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials
High
CVE-2024-5207
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-5085
Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-3198
WP Font Awesome Share Icons <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2024-5147
WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.37 - Unauthenticated Local File Inclusion
High
CVE-2024-4157
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues
Medium
CVE-2024-0453
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback
Critical
CVE-2024-35700
UserPro <= 5.1.8 - Unauthenticated Account Takeover to Privilege Escalation
Medium
CVE-2024-3927
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass
Medium
CVE-2024-0452
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback
Medium
CVE-2024-0451
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback
Medium
CVE-2024-34795
Tainacan <= 0.21.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34798
Debug Log – Manger Tool <= 1.4.5 - Unauthenticated Information Exposure via Logs
Medium
CVE-2024-34801
Praison SEO WordPress <= 4.0.15 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2024-34794
Tainacan <= 0.21.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-34800
Crafthemes Demo Import <= 3.3 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2024-2772
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-3714
GiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35162
Download Plugins and Themes from Dashboard <= 1.8.5 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2024-34770
Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2024-3551
Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.