High
CVE-2024-50480
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-9475
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter
Medium
CVE-2024-9626
Editorial Assistant by Sovrn <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Attachment Upload and Set Post Featured Image
Critical
CVE-2024-50486
Acnoo Flutter API <= 1.0.5 - Authentication Bypass via Account Takeover
High
CVE-2024-9890
User Toolkit <= 1.2.3 - Authenticated (Subscriber+) Authentication Bypass
Critical
CVE-2024-50483
Meetup <= 0.1 - Authentication Bypass via Account Takeover
Critical
CVE-2024-50487
MaanStore API <= 1.0.1 - Authentication Bypass via Account Takeover
Critical
CVE-2024-50493
Automatic Translation <= 1.0.4 - Unauthenticated Arbitrary File Upload
High
CVE-2024-8392
WordPress Post Grid Layouts with Pagination – Sogrid <= 1.5.6 - Authenticated (Admin+) Local File Inclusion
Critical
CVE-2024-50489
Realty Workstation <= 1.0.45 - Authentication Bypass to Account Takeover
Critical
CVE-2024-9933
WatchTowerHQ <= 3.10.1 - Authentication Bypass to Administrator due to Missing Empty Value Check
Critical
CVE-2024-50473
Ajar in5 Embed <= 3.1.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-9931
Wux Blog Editor <= 3.0.0 - Authentication Bypass to Administrator
Critical
CVE-2024-50482
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload
High
CVE-2024-50479
Woocommerce Quote Calculator <= 1.1 - Unauthenticated SQL Injection
Critical
CVE-2024-50475
Signup Page <= 1.0 - Unauthenticated Arbitrary Options Update
High
CVE-2024-50481
Bstone Demo Importer <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-50502
Cozy Blocks <= 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-50478
1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover
High
CVE-2024-50491
RSVP ME <= 1.9.9 - Unauthenticated SQL Injection
Medium
CVE-2024-50501
Kata Plus <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-50492
ScottCart <= 1.1 - Unauthenticated Remote Code Execution
High
CVE-2024-50488
Token Login <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2024-50484
Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.