Low
CVE-2024-0628
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Low
CVE-2024-1075
Minimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypass
Critical
CVE-2024-25100
Coupon Referral Program <= 1.8.3 - Unauthenticated PHP Object Injection
Critical
CVE-2023-7165
JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing
Medium
CVE-2024-24831
Premium Addons for Elementor <= 4.10.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-24845
Post Thumbnail Editor <= 2.4.8 - Sensitive Information Exposure
Medium
CVE-2024-1208
LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
Medium
CVE-2024-1209
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
Medium
CVE-2024-1210
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
Critical
CVE-2024-24842
Knowledge Base for Documentation, FAQs with AI Assistance <= 11.30.2 - Unauthenticated PHP Object Injection in is_article_recently_viewed
Medium
CVE-2024-24835
BEAR <= 1.1.4 - Missing Authorization via Several Functions
Medium
CVE-2024-24834
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
Medium
CVE-2024-24832
EventPrime <= 3.3.9 - Improper Input Validation via save_event_booking
Medium
CVE-2024-0963
Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1046
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0844
Popup More <= 2.2.4 - Authenticated (Admin+) Directory Traversal to Limited Local File Inclusion
Medium
CVE-2024-1047
ThemeIsle SDK <= Various Versions - Missing Authorization
Medium
CVE-2024-0685
Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection
High
CVE-2024-1072
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.15.21 - Missing Authorization via seedprod_lite_new_lpage
Critical
CVE-2024-24797
ERE Recently Viewed <= 1.3 - Unauthenticated PHP Object Injection
High
CVE-2024-24796
Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently <= 4.1.1 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save
High
CVE-2024-24703
MultiVendorX Marketplace <= 4.0.25 - Missing Authorization
Medium
CVE-2023-6165
Restrict Usernames Emails Characters <= 3.1.3 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-23519
Email Before Download <= 6.9.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.