Medium
CVE-2024-11928
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-10959
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth
Medium
CVE-2024-11973
Quran multilanguage Text & Audio <= 2.3.21 - Reflected Cross-Site Scripting via sourate and lang Parameters
Medium
CVE-2024-11945
Email Reminders <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Medium
CVE-2024-11940
Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter
High
CVE-2023-6947
Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-12323
turboSMTP <= 4.6 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2024-11106
Simple Restrict <= 1.2.7 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-11868
LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API
High
CVE-2024-11205
WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation
Medium
CVE-2024-11841
Tithe.ly Giving Button <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-12209
WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-24567
WP Mailster <= 1.8.16.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-11464
Easy Code Snippets <= 1.0.2 - Reflected Cross-Site Scripting
High
CVE-2024-11501
Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-11457
Feedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-11380
Mini Program API <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12270
Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection
Medium
CVE-2024-11367
Smoove connector for Elementor forms <= 4.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11374
TWChat – Send or receive messages from users <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12128
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameter
Medium
CVE-2024-12253
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update / Data Access
High
CVE-2024-11010
FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion
Medium
CVE-2024-10046
افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.