Medium
CVE-2024-30464
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-30459
AI WP Writer <= 3.6.5 - Missing Authorization
Medium
CVE-2024-30480
CGC Maintenance Mode <= 1.2 - IP Spoofing
Medium
CVE-2024-30522
Newsletter <= 8.2.0 - IP Spoofing
High
CVE-2024-2501
Hubbub Lite – Fast, Reliable Social Network Sharing Buttons <= 1.33.1 - PHP Object Injection
High
CVE-2024-1770
Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-2783
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-50374
CMP – Coming Soon & Maintenance <= 4.1.10 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2024-30230
PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-23500
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.19 - Authenticated (Contributor+) Server-Side Request Forgery
Critical
CVE-2024-30239
Zoho Campaigns <= 2.0.6 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-2203
The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget
Critical
CVE-2024-30224
WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) <= 1.3.2 - Unauthenticated PHP Object Injection
Medium
CVE-2024-22300
Email Subscribers & Newsletters <= 5.7.11 - Reflected Cross-Site Scripting via campaign_id
High
CVE-2024-30222
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.26 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2024-30226
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg <= 3.3.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-1790
Ajax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read
High
CVE-2024-2693
Link Whisper Free <= 0.7.1 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2024-30221
Sunshine Photo Cart: Free Client Photo Galleries for Photographers <= 3.1.1 - Unauthenticated PHP Object Injection
High
CVE-2024-30228
Hercules Core <= 6.4 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-30223
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.26 - Unauthenticated PHP Object Injection
Medium
CVE-2024-2210
The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing
Medium
CVE-2024-30200
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-2261
Event Tickets and Registration <= 5.8.2 - Improper Authorization to Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.