Critical
CVE-2024-56214
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-56223
Gulri Slider <= 3.5.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-56215
Member Directory and Contact Form <= 1.7.0 - Missing Authorization
Medium
CVE-2024-56210
Userpro <= 5.1.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-56256
Embed PDF Viewer <= 2.3.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-56217
Download Manager <= 3.3.03 - Missing Authorization
Medium
CVE-2024-56224
Ledenbeheer <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56209
Kleo < 5.4.4 - Reflected Cross-Site Scripting
High
CVE-2024-56233
Kintpv Wooconnect <= 8.129 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-11768
Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files
High
CVE-2024-11740
Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-10151
Auto iFrame <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12121
Broken Link Checker | Finder <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery
Medium
CVE-2024-56060
HTML Forms <= 1.4.1 - Reflected Cross-Site Scripting
High
CVE-2024-56067
WP SuperBackup <= 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download
Critical
CVE-2024-56071
Simple Dashboard <= 2.0 - Unauthenticated Privilege Escalation
Critical
CVE-2024-12626
AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Medium
CVE-2024-56207
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-56206
gap-hub-user-role <= 3.4.1 - Cross-Site Request Forgery
High
CVE-2024-56203
Wayne Audio Player <= 1.0 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-12560
Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Medium
CVE-2024-56062
Royal Elementor Addons <= 1.3.987 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10548
WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
Critical
CVE-2024-56205
AI Magic <= 1.0.4 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.