Medium
CVE-2024-12324
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2024-12252
SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)
Medium
CVE-2024-11378
Bizapp for WooCommerce <= 2.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-12176
WordLift – AI powered SEO – Schema <= 3.54.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-11377
Automate Hub Free by Sperse.IO <= 1.7.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-12327
LazyLoad Background Images <= 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
Medium
CVE-2024-12170
ViewMedica Embed <= 1.4.15 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2024-12291
ViewMedica 9 <= 1.4.17 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12153
GDY Modular Content <= 0.9.92 - Reflected Cross-Site Scripting
Medium
CVE-2024-11375
WC1C <= 0.23.0 - Reflected Cross-Site Scripting
High
CVE-2024-12322
ThePerfectWedding.nl Widget <= 2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-11465
Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection
Low
CVE-2024-10527
Spacer <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Limited Information Disclosure
Medium
CVE-2024-9208
Enable Accessibility <= 1.4.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-12402
Themes Coder – Create Android & iOS Apps For Your Woocommerce Site <= 1.3.4 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation
Medium
CVE-2024-11437
Timeline Designer <= 1.4 - Authenticated (Admin+) SQL Injection
High
CVE-2024-12416
Woomotiv <= 3.6.1 - Unauthenticated SQL Injection
Medium
CVE-2024-12541
Chative Live chat and Chatbot <= 1.1 - Cross-Site Request Forgery via add_chative_widget_action Function
Medium
CVE-2024-12419
Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler <= 1.7.1 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting
Medium
CVE-2024-12538
Duplicate Post, Page and Any Custom Post <= 3.5.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Medium
CVE-2024-12557
Transporters.io <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12559
ClickDesigns <= 1.8.0 - Missing Authorization to API Key Modification or Removal
Medium
CVE-2024-11777
Sell Media <= 2.5.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12528
WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.