Medium
CVE-2024-12717
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2024-56230
Dynamic Product Category Grid, Slider for WooCommerce <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-56229
SearchIQ <= 4.6 - Cross-Site Request Forgery
Medium
CVE-2025-24584
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.3.0 - Missing Authorization
Medium
CVE-2024-56212
Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-24586
Shipment Tracker for Woocommerce <= 1.4.23 - Reflected Cross-Site Scripting
Medium
CVE-2024-12714
Backlink Monitoring Manager <= 0.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-56265
WooCommerce PDF Vouchers < 4.9.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-11297
Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-56228
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-56225
Premium Addons for Elementor <= 4.10.56 - Missing Authorization
Medium
CVE-2024-56211
Userpro <= 5.1.9 - Missing Authorization
Critical
CVE-2024-12571
Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion
Medium
CVE-2024-56235
Coupon <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-56214
Userpro <= 5.1.9 - Unauthenticated Local File Inclusion
Medium
CVE-2024-56223
Gulri Slider <= 3.5.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-56215
Member Directory and Contact Form <= 1.7.0 - Missing Authorization
Medium
CVE-2024-56210
Userpro <= 5.1.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-56256
Embed PDF Viewer <= 2.3.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-56217
Download Manager <= 3.3.03 - Missing Authorization
Medium
CVE-2024-56224
Ledenbeheer <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56209
Kleo < 5.4.4 - Reflected Cross-Site Scripting
High
CVE-2024-56233
Kintpv Wooconnect <= 8.129 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-11768
Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.