Critical
CVE-2023-6825
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-0825
Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-1731
Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-1478
Maintenance Mode <= 3.0.1 - Information Exposure
Medium
CVE-2024-0839
FeedWordPress <= 2022.0222 - Insecure Direct Object Referece
Medium
CVE-2024-0378
AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-2020
Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1775
Nextend Social Login and Register <= 3.1.12 - Reflected Self-Based Cross-Site Scripting via error_description
High
CVE-2024-1793
AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL Injection
High
CVE-2024-1859
Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2023-6880
Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1763
Wp Social Login and Register Social Counter <= 3.0.0 - Missing Authorization to Unauthenticated Social Login/Share Status Update
Medium
CVE-2024-1120
NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure
High
CVE-2024-1935
Giveaways and Contests by RafflePress <= 1.12.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1976
Marketing Optimizer <= 20200925 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-1978
Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgery
Medium
CVE-2024-1680
Premium Addons for Elementor <= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets
Medium
CVE-2024-1383
WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting
Medium
CVE-2024-1476
Under Construction / Maintenance Mode from Acurax <= 2.6 - Information Exposure
Medium
CVE-2024-1136
Coming Soon Page & Maintenance Mode <= 2.2.1 - Maintenance Mode Bypass
Medium
CVE-2024-0898
Chat Bubble <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1642
MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk
Medium
CVE-2023-6922
Under Construction / Maintenance Mode from Acurax <= 2.6 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-0687
Restrict User Access – Ultimate Membership & Content Protection <= 2.5 - Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.