High
CVE-2024-3849
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-3812
Salient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
High
CVE-2024-3810
Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Critical
CVE-2024-32600
Master Slider <= 3.9.5 - Unauthenticated PHP Object Injection
Medium
CVE-2024-32587
EnvíaloSimple: Email Marketing y Newsletters <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-49742
Support Genix <= 1.2.3 - Missing Authorization
High
CVE-2023-7064
Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer
Critical
CVE-2024-2876
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection
Medium
CVE-2024-0629
2Checkout Payment Gateway for WooCommerce <= 6.2 - Missing Authorization via sniff_ins
Medium
CVE-2024-3215
Paid Memberships Pro <= 3.0.1 - Cross-Site Request Forgery
Medium
CVE-2024-3243
Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
High
CVE-2024-32507
Login with phone number <= 1.7.16 - Unauthorized Account Password Change to Privilege Escalation
Medium
CVE-2024-3295
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Unauthenticated Media Deletion
Medium
CVE-2024-3867
Tainacan Interface <= 2.7.2 - Reflected Cross-Site Scripting
Critical
CVE-2024-32523
Mailster <= 4.0.6 - Unauthenticated Local File Inclusion
High
CVE-2024-29800
Timber <= 1.23.0 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2024-32143
Podlove Podcast Publisher <= 4.1.0 - Missing Authorization
Medium
CVE-2024-32441
Zoho Campaigns <= 2.0.7 - Cross-Site Request Forgery via zcwc_optin_save
Medium
CVE-2024-32439
WP Client Reports <= 1.0.22 - Cross-Site Request Forgery
Medium
CVE-2024-32430
ActiveCampaign <= 8.1.14 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2024-32442
Zoho Campaigns <= 2.0.7 - Cross-Site Request Forgery via zcwc_integration_disconnect
Medium
CVE-2024-1957
GiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-3275
eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure
High
CVE-2024-32431
Import Users from CSV <= 1.2 - Authenticated (Admin+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.