Medium
CVE-2024-11841
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2024-12209
WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-24567
WP Mailster <= 1.8.16.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-11464
Easy Code Snippets <= 1.0.2 - Reflected Cross-Site Scripting
High
CVE-2024-11501
Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-11457
Feedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-11380
Mini Program API <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12270
Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection
Medium
CVE-2024-11367
Smoove connector for Elementor forms <= 4.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11374
TWChat – Send or receive messages from users <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12128
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameter
Medium
CVE-2024-12253
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update / Data Access
High
CVE-2024-11010
FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion
Medium
CVE-2024-10046
افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-12026
Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) New Filter Creation
Medium
CVE-2024-12165
Mollie for Contact Form 7 <= 5.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11329
Comfino Payment Gateway <= 4.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12166
Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2024-12167
Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via _wpnonce
Medium
CVE-2024-11451
Zooom <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11353
SMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
Medium
CVE-2024-7894
If Menu <= 0.19.1 - Missing Authorization to License Key Update
Medium
CVE-2024-11605
WP Publications <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-54240
Blaze Online eParcel for WooCommerce <= 1.3.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.