Medium
CVE-2024-8855
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-56048
WPLMS <= 1.9.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Critical
CVE-2024-56059
Partners <= 0.2.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-11748
Taeggie Feed <= 0.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-56055
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary Directory Deletion
High
CVE-2024-56050
WPLMS < 1.9.9.5.3 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-56027
Leads CRM <= 2.0.13 - Reflected Cross-Site Scripting
Medium
CVE-2024-56035
Upload Scanner <= 1.2 - Reflected Cross-Site Scripting
Critical
CVE-2024-56040
VibeBP <= 1.9.9.4.1 - Unauthenticated Privilege Escalation
Medium
CVE-2025-24576
Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.7 - Reflected Cross-Site Scripting
High
CVE-2024-56051
WPLMS < 1.9.9.5 - Authenticated (Student+) Remote Code Execution
Medium
CVE-2024-56037
User Referral <= 8.0 - Reflected Cross-Site Scripting
Critical
CVE-2024-56046
WPLMS <= 1.9.9 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-8857
WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-10102
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11606
Tabs Shortcode <= 2.0.2 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2024-56029
Easy Language Switcher <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2024-56039
VibeBP < 1.9.9.7.7 - Unauthenticated SQL Injection
High
CVE-2024-56052
WPLMS < 1.9.9.5.2 - Authenticated (Student+) Arbitrary File Upload
Medium
CVE-2024-11439
ScanCircle <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56041
VibeBP < 1.9.9.5.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-12340
Animation Addons for Elementor <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template
Medium
CVE-2024-56053
WPLMS < 1.9.9.5.3 - Authenticated (Instructor+) SQL Injection
Medium
CVE-2024-56047
WPLMS < 1.9.9.5.3 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.