Medium
CVE-2024-12496
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-12515
Muslim Prayer Time-Salah/Iqamah <= 1.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12514
3DVieweronline <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12067
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-11907
Skyword API Plugin <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12249
GS Insever Portfolio <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) CSS Injection
Medium
CVE-2024-12621
Yumpu E-Paper publishing <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12605
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.5 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-13153
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2024-12616
Bitly's WordPress Plugin <= 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-12491
SimplyRETS Real Estate IDX <= 2.11.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12848
SKT Page Builder <= 4.6 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-12206
Wordpress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header Deletion
Medium
CVE-2024-5769
MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Limited Settings Update
High
CVE-2024-12330
WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposure
Medium
CVE-2024-12618
Newsletter2Go <= 4.0.14 - Missing Authorization to Authenticated (Subscriber+) Style Reset
High
CVE-2024-11423
Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch
Medium
CVE-2024-12712
Shopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order Updates
High
CVE-2024-12854
Garden Gnome Package <= 2.3.0 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2024-12853
Modula Image Gallery <= 2.11.10 - Authenticated (Author+) Arbitrary File Upload
Critical
CVE-2024-11635
WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution
Medium
CVE-2025-22556
Norse Rune Oracle Plugin <= 1.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12584
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Medium
CVE-2025-22820
VR Views <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.