High
CVE-2024-6885
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Medium
CVE-2024-39630
Timetable and Event Schedule <= 2.4.13 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2024-38792
Language Translate Widget for WordPress – ConveyThis <= 234 - Missing Authorization to Limited Option Update
Medium
CVE-2024-38771
Atarim <= 4.0 - Missing Authorization
Medium
CVE-2024-6455
ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function
High
CVE-2024-5726
Timeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-6175
Booking Ultra Pro <= 1.1.13 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates
Critical
CVE-2024-38759
Search & Replace <= 3.2.2 - Unauthenticated PHP Object Injection
High
CVE-2024-6069
Pie Register - Basic <= 3.8.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Critical
CVE-2024-37502
WooCommerce Social Login <= 2.6.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-6244
PZ Frontend Manager <= 1.0.5 - Cross-Site Request Forgery to Profile Picture Update
Medium
CVE-2024-6011
Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37434
Atarim <= 3.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37205
affiliate-toolkit <= 3.4.4 - Unauthenticated Sensitive Information Exposure via Logs
Medium
CVE-2024-37101
WP Post Author <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5686
WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget
High
CVE-2024-35780
Page Builder: Live Composer <= 1.5.42 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-5649
Universal Slider <= 1.6.5 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-5724
Photo Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2024-5488
SEOPress <= 7.8 - Unauthenticated PHP Object Injection
Medium
CVE-2024-1634
Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Missing Authorization to Unauthenticated Service Disconnection
Critical
CVE-2024-5871
WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-2472
LatePoint Plugin <= 4.9.9 - Missing Authorization and Sensitive Information Exposure via IDOR
Critical
CVE-2024-4936
Canto <= 3.0.8 - Unauthenticated Remote File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.