Critical
CVE-2024-8615
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-6626
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization
Critical
CVE-2024-9307
mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files
High
CVE-2024-10028
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log
Medium
CVE-2024-10084
Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode
High
CVE-2024-9946
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.13.68 - Authentication Bypass via Disqus OAuth provider
Medium
CVE-2024-10715
MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block
Medium
CVE-2025-24749
EZPZ SAML SP Single Sign On (SSO) <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-10471
Everest Forms <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10543
Tumult Hype Animations <= 1.9.14 - Missing Authorization
Medium
CVE-2024-10647
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL
High
CVE-2024-10020
Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider
Medium
CVE-2024-10535
Video Gallery for WooCommerce <= 1.31 - Missing Authorization to Unauthenticated Limited File Deletion
Medium
CVE-2024-9178
XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9878
Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-10687
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injection
Medium
CVE-2024-7429
Zotpress <= 7.3.12 - Missing Authorization
High
CVE-2024-10711
WooCommerce Report <= 1.5.1 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2024-9667
Seriously Simple Podcasting <= 3.5.0 - Reflected Cross-Site Scripting via add_query_arg Parameter
Medium
CVE-2024-9443
Basticom Framework <= 1.5.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-51762
PropertyShift <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-51783
Forms: 3rd-Party Post Again <= 0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-51716
Twitter real time search scrolling <= 7.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-51706
UW Freelancer <= 0.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.