Medium
CVE-2024-11849
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-56014
Olivia <= 0.9.5 - Reflected Cross-Site Scripting
Low
CVE-2024-9654
Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass
Medium
CVE-2024-10356
ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-12395
WooCommerce Additional Fees On Checkout (Free) <= 1.4.7 - Reflected Cross-Site Scripting via 'number'
Medium
CVE-2024-12302
Icegram Engage <= 3.1.31 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-56015
Tidy Up <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2024-12311
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.43 - Authenticated (Admin+) SQL Injection
High
CVE-2024-8326
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-52485
WP Menu Image <= 2.2 - Missing Authorization to Unauthenticated Menu Image Deletion
Medium
CVE-2024-12601
Calculated Fields Form <= 5.2.63 - Denial of Service
Medium
CVE-2024-11294
Memberful <= 1.73.9 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
High
CVE-2024-11356
Tour Master - Tour Booking, Travel, Hotel < 5.3.4 - Unauthenticated Stored Cross-Site Scripting via Room Booking
Medium
CVE-2024-56016
Image Mapper <= 0.2.5.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-24577
Poll Maker <= 5.5.0 - Missing Authorization
Medium
CVE-2024-56010
Device Detector <= 4.2.0 - Reflected Cross-Site Scripting via id
Medium
CVE-2024-55998
Popup Surveys & Polls for WordPress (Mare.io) <= 1.36 - Missing Authorization
High
CVE-2024-55987
Advanced What should we write next about <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-55992
WooCommerce Basic Ordernumbers <= 1.4.4 - Missing Authorization
High
CVE-2024-55989
WP Simple Pay Lite Manager <= 1.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-56001
Ksher <= 1.1.1 - Missing Authorization
Critical
CVE-2024-55978
Code Generator Pro <= 1.2 - Unauthenticated SQL Injection
Medium
CVE-2024-55994
畅言评论系统 <= 2.0.5 - Missing Authorization
Medium
CVE-2024-55985
YDS Support Ticket System <= 1.0 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.