Medium
CVE-2024-12004
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-12283
WP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter
Medium
CVE-2024-12325
Waymark <= 1.4.1 - Reflected Cross-Site Scripting via 'content'
Medium
CVE-2024-11351
Restrict – membership, site, content and user access restrictions for WordPress <= 2.2.8 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-12294
Last Viewed Posts by WPBeginner <= 1.0.1 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-54265
Barcode Scanner with Inventory & Order Manager <= 1.6.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-54267
CM Answers <= 3.2.6 - Missing Authorization
Critical
CVE-2024-11972
Hunk Companion <= 1.8.5 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
Medium
CVE-2024-54268
SiteOrigin Widgets Bundle <= 1.64.0 - Missing Authorization
Critical
CVE-2024-43234
Woffice <= 5.4.14 - Unauthenticated Privilege Escalation
Medium
CVE-2024-54266
ImageRecycle pdf & image compression <= 3.1.16 - Reflected Cross-Site Scripting
High
CVE-2024-11840
RapidLoad – Optimize Web Vitals Automatically <= 2.4.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification and SQL Injection
Medium
CVE-2025-24619
WP Log Action <= 0.51 - Reflected Cross-Site Scripting
Medium
CVE-2024-11008
Members <= 3.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-11928
iChart – Easy Charts and Graphs <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
High
CVE-2024-10959
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth
Medium
CVE-2024-11973
Quran multilanguage Text & Audio <= 2.3.21 - Reflected Cross-Site Scripting via sourate and lang Parameters
Medium
CVE-2024-11945
Email Reminders <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Medium
CVE-2024-11940
Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter
High
CVE-2023-6947
Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-12323
turboSMTP <= 4.6 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2024-11106
Simple Restrict <= 1.2.7 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-11868
LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API
High
CVE-2024-11205
WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.