Medium
CVE-2024-12566
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-11726
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12568
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Workflow Settings
Medium
CVE-2024-10584
DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-8721
Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12274
BookingPress <= 1.1.22 - Unauthenticated File Export Download
Medium
CVE-2024-11885
NinjaTeam Chat for Telegram <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12567
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Form Settings
Medium
CVE-2024-12518
shMapper by Teplitsa <= 1.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11896
Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12710
WP-Appbox <= 4.5.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12034
Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock
Medium
CVE-2024-12268
Responsive Blocks – WordPress Gutenberg Blocks <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12266
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.7 - Missing Authorization
Medium
CVE-2024-11230
Elementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget
Medium
CVE-2025-24590
picu – Online Photo Proofing Gallery <= 2.4.0 - Missing Authorization
Medium
CVE-2025-24598
WP Mailster <= 1.8.17.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24606
Client Invoicing by Sprout Invoices – Easy Estimates and Invoices <= 20.8.1 - Missing Authorization
Medium
CVE-2024-11852
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization
Medium
CVE-2025-24592
SysBasics Customize My Account for WooCommerce <= 2.8.22 - Reflected Cross-Site Scripting
Medium
CVE-2024-12875
Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2024-10453
Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings
Medium
CVE-2024-12558
WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db
Medium
CVE-2024-11688
LaTeX2HTML <= 2.5.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.