High
CVE-2024-56068
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-56070
WP SuperBackup <= 2.3.3 - Missing Authorization
Medium
CVE-2024-56069
WP SuperBackup <= 2.3.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-56061
Computer Repair Shop <= 3.8119 - Authenticated (Customer+) Privilege Esclation via Account Takeover
Medium
CVE-2025-24581
Instantio <= 3.3.7 - Missing Authorization to Unauthenticated Settings Update
Critical
CVE-2024-56064
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-12331
File Manager Pro – Filester <= 1.8.6 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
Medium
CVE-2025-24583
12 Step Meeting List <= 3.16.5 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2024-56204
Sinking Dropdowns <= 1.25 - Cross-Site Request Forgery
Medium
CVE-2024-12585
Property Hive <= 2.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56063
Essential Addons for Elementor <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12454
Affiliate Program Suite — SliceWP Affiliates <= 1.1.23 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12554
Peter’s Custom Anti-Spam <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function
Medium
CVE-2024-12250
Accept Authorize.NET Payments Using Contact Form 7 <= 2.2 - Unauthenticated Information Exposure
Medium
CVE-2024-11254
AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12596
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
CVE-2024-11881
Easy Waveform Player <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11912
Traveler <= 3.1.6 - Unauthenticated SQL Injection via order_id
Medium
CVE-2024-56032
FV Descriptions <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12061
Events Addon for Elementor <= 2.2.3 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-56030
10CentMail <= 2.1.50 - Reflected Cross-Site Scripting
Critical
CVE-2024-56058
VRPConnector <= 2.0.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-11295
Simple Page Access Restriction <= 1.0.29 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
High
CVE-2024-56045
WPLMS < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.