Critical
CVE-2024-48030
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Critical
CVE-2024-48026
Disc Golf Manager <= 1.0.0 - Unauthenticated PHP Object Injection
Critical
CVE-2024-48033
Talkback <= 1.0 - Unauthenticated PHP Object Injection
Critical
CVE-2024-48028
IP Loc8 <= 1.1 - Unauthenticated PHP Object Injection
High
CVE-2024-9314
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2024-8989
Stars Testimonials <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via stars_testimonials Shortcode
Medium
CVE-2024-8430
Spice Starter Sites <= 1.2.5 - Missing Authorization to Unauthenticated Demo Content Import
High
CVE-2024-7434
UltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2024-47636
JobSearch <= 2.5.9 - Unauthenticated PHP Object Injection
Medium
CVE-2024-47370
Author Avatars List/Block <= 2.1.21 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-7433
Empowerment <= 1.0.2 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-7432
Unseen Blog <= 1.0.0 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-47345
Starter Templates <= 4.4.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2024-8922
Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php
Medium
CVE-2024-3866
Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Referer
Critical
CVE-2024-8514
Prisna GWT - Google Website Translator <= 1.4.11 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2024-44003
Spice Starter Sites <= 1.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-8239
Starbox <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter URL Field
Medium
CVE-2024-7381
Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution
Medium
CVE-2024-8325
Gutenberg Page Builder Blocks & Ready-Made Patterns Library <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7435
Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-2694
Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-43990
Masterstudy LMS Starter <= 1.1.8 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-8030
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.