High
CVE-2024-11194
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-52472
Weather Atlas Widget <= 3.0.3 - Unauthenticated Cross-Site Scripting
Medium
CVE-2024-10390
Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2024-52441
Quick Learn <= 1.0.1 - Unauthenticated PHP Object Injection
High
CVE-2024-10388
WordPress GDPR <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-11069
WordPress GDPR <= 2.0.2 - Missing Authorization to Unauthenticated Arbitrary User Deletion
Medium
CVE-2025-24553
Shipping with Venipak for WooCommerce <= 1.22.4 - Reflected Cross-Site Scripting
High
CVE-2025-24556
MooWoodle – WordPress & Moodle LMS Integration Bridge <= 3.2.4 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-11183
Simple Side Tab <= 2.1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24550
Job Manager by JobScore <= 2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-10592
Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11094
404 Solution <= 2.35.17 - Missing Authentication to Sensitive Information Exposure
High
CVE-2024-9887
Login using WordPress Users ( WP as SAML IDP ) <= 1.15.6 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-10645
Blogger 301 Redirect <= 2.5.3 - Unauthenticated SQL Injection via br
Medium
CVE-2024-10533
WP Chat App <= 3.6.8 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
Medium
CVE-2024-9386
Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-8873
PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-6628
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request Forgery
Medium
CVE-2024-10884
SimpleForm Contact Form Submissions <= 2.1.0 - Reflected Cross-Site Scripting
High
CVE-2024-9839
Uix Slideshow <= 1.6.5 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2024-9192
WP Video Robot <= 1.20.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update
High
CVE-2024-9849
Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder <= 4.8 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2024-9615
BulkPress <= 0.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-9938
Bounce Handler MailPoet 3 <= 1.3.21 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.