High
CVE-2024-30222
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Critical
CVE-2024-30226
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg <= 3.3.3 - Unauthenticated PHP Object Injection
High
CVE-2024-2693
Link Whisper Free <= 0.7.1 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2024-30221
Sunshine Photo Cart: Free Client Photo Galleries for Photographers <= 3.1.1 - Unauthenticated PHP Object Injection
High
CVE-2024-30228
Hercules Core <= 6.4 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-30223
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.26 - Unauthenticated PHP Object Injection
Medium
CVE-2024-29817
affiliate-toolkit <= 3.4.5 - Authenticated (Author+) Stored Cross-Site Scripting via ratings
Medium
CVE-2023-6067
WP User Profile Avatar <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-2025
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request
Medium
CVE-2022-4965
Invitation Code Content Restriction Plugin from CreativeMinds <= 1.5.4 - Reflected Cross-Site Scripting
High
CVE-2024-29136
Tourfic <= 2.11.17 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-29089
Five Star Restaurant Menu <= 2.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1685
Social Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-1813
Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
High
CVE-2024-27985
PropertyHive <= 2.0.9 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-1535
ProfilePress <= 4.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1851
affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list
Medium
CVE-2024-2298
affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product
Medium
CVE-2024-1506
Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fiestar Widget
High
CVE-2024-1773
PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2024-1950
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object Injection
High
CVE-2024-1951
Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid <= 1.3.8 - Authenticated(Contributor+) PHP Object Injection
High
CVE-2024-2006
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup
Critical
CVE-2023-6825
File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.