Critical
CVE-2024-9659
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Critical
CVE-2024-9511
FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection
Medium
CVE-2024-10518
ProfilePress <= 4.15.14 - Authenticated (Admin+) Stored Cross-Site Scripting via "Product Files"
Medium
CVE-2024-10517
ProfilePress <= 4.15.14 - Authenticated (Admin+) Stored Cross-Site Scripting via "Labels"
Medium
CVE-2024-11334
My Contador lesr <= 2.0 - Missing Authorization to Unauthenticated User Registration CSV Export
High
CVE-2024-11409
Grid View Gallery <= 1.0 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2024-10675
affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting
High
CVE-2024-10913
Clone <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace'
High
CVE-2024-52445
QRMenu Restaurant QR Menu Lite <= 1.0.3 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2024-52443
Geolocator <= 1.1 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52440
Xpresslane Fast Checkout <= 1.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-52460
AtaraPay WooCommerce Payment Gateway <= 2.0.13 - Reflected Cross-Site Scripting
Critical
CVE-2024-52439
Team Rosters <= 4.8.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52441
Quick Learn <= 1.0.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-10786
Simple Local Avatars <= 2.7.11 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing
Critical
CVE-2024-52433
My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52432
NIX Anti-Spam Light <= 0.0.4 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52430
Lis Video Gallery <= 0.2.1 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52409
AJAX Random Posts <= 0.3.3 - Unauthenticated PHP Object Injection
High
CVE-2024-10962
Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52410
Referrer Detector <= 4.2.1.0 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52413
Airin Blog <= 1.6.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52414
WDES Responsive Mobile Menu <= 1.2.5 - Unauthenticated PHP Object Injection
Critical
CVE-2024-52412
Xin <= 1.0.8.1 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.