High
CVE-2024-11740
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-10151
Auto iFrame <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12121
Broken Link Checker | Finder <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery
Medium
CVE-2024-56060
HTML Forms <= 1.4.1 - Reflected Cross-Site Scripting
High
CVE-2024-56067
WP SuperBackup <= 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download
Critical
CVE-2024-56071
Simple Dashboard <= 2.0 - Unauthenticated Privilege Escalation
Critical
CVE-2024-12626
AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Medium
CVE-2024-56207
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-56206
gap-hub-user-role <= 3.4.1 - Cross-Site Request Forgery
High
CVE-2024-56203
Wayne Audio Player <= 1.0 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-12560
Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Medium
CVE-2024-56062
Royal Elementor Addons <= 1.3.987 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10548
WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
Critical
CVE-2024-56205
AI Magic <= 1.0.4 - Unauthenticated Privilege Escalation
High
CVE-2024-56068
WP SuperBackup <= 2.3.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-56070
WP SuperBackup <= 2.3.3 - Missing Authorization
Medium
CVE-2024-56069
WP SuperBackup <= 2.3.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-56061
Computer Repair Shop <= 3.8119 - Authenticated (Customer+) Privilege Esclation via Account Takeover
Medium
CVE-2025-24581
Instantio <= 3.3.7 - Missing Authorization to Unauthenticated Settings Update
Critical
CVE-2024-56064
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-12331
File Manager Pro – Filester <= 1.8.6 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
Medium
CVE-2025-24583
12 Step Meeting List <= 3.16.5 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2024-56204
Sinking Dropdowns <= 1.25 - Cross-Site Request Forgery
Medium
CVE-2024-12585
Property Hive <= 2.1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.