Critical
CVE-2024-52411
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Medium
CVE-2024-9578
Hide Links <= 1.4.2 - Unauthenticated Shortcode Execution
Medium
CVE-2024-51674
Sastra Essential Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51579
5 Stars Rating Funnel <= 1.4.01 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-51586
Elementary Addons <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-50530
Stars SMTP Mailer <= 1.7 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-8512
W3SPEEDSTER <= 7.26 - Authenticated (Administrator+) Remote Code Execution
Medium
CVE-2024-10227
affiliate-toolkit <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode
High
CVE-2024-50507
DS.DownloadList <= 1.3 - Unauthenticated PHP Object Injection
High
CVE-2024-50416
WPC Shop as a Customer for WooCommerce <= 1.2.6 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2024-50408
Namaste! LMS <= 2.6.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-10250
Nioland <= 1.2.6 - Reflected Cross-Site Scripting via s
High
CVE-2024-49684
Backup and Staging by WP Time Capsule <= 1.22.21 - Authenticated (Administrator+) PHP Object Injection
Critical
CVE-2024-49626
Shipyaari Shipping Management <= 1.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-49625
SiteBuilder Dynamic Components <= 1.0 - Unauthenticated PHP Object Injection
Critical
CVE-2024-49624
Advanced Advertising System <= 1.3.1 - Unauthenticated PHP Object Injection
High
CVE-2024-10079
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-49332
Giveaway Boost <= 2.1.4 - Unauthenticated PHP Object Injection
Critical
CVE-2024-49318
My Reading Library <= 1.0 - Unauthenticated PHP Object Injection
High
CVE-2024-49227
Free Stock Photos Foter <= 1.5.4 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2024-49226
TAKETIN To WP Membership <= 2.8.12 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-49218
Recently <= 1.1 - Unauthenticated PHP Object Injection
High
CVE-2024-8757
Boost Your Blog's Engagement with WP Post Author <= 3.8.1 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-9047
WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.