High
CVE-2024-49621
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2024-49618
MyTweetLinks <= 1.1.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-49629
Endless Posts Navigation <= 2.2.7 - Cross-Site Request Forgery
High
CVE-2024-7982
Registrations for the Events Calendar – Event Registration Plugin <= 2.12.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-49623
Duplicate Title Validate <= 1.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-49614
SermonAudio Widgets <= 1.9.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-9219
WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting
Medium
CVE-2024-49630
WP Education <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via text_html_tag
Critical
CVE-2024-49626
Shipyaari Shipping Management <= 1.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-49625
SiteBuilder Dynamic Components <= 1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-49609
Author Discussion <= 0.2.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-49627
WordPress Image SEO <= 1.1.4 - Cross-Site Request Forgery
High
CVE-2024-49617
Back Link Tracker <= 1.0.0 - Cross-Site Request Forgery to SQL Injection
Critical
CVE-2024-49624
Advanced Advertising System <= 1.3.1 - Unauthenticated PHP Object Injection
High
CVE-2024-49615
SafetyForms <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2024-49628
Most And Least Read Posts Widget <= 2.5.18 - Cross-Site Request Forgery via most_and_least_read_posts_options
High
CVE-2024-49616
Rate Own Post <= 1.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-49605
AVChat Video Chat <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-49608
GERRYWORKS Post by Mail <= 1.0 - Contributor+ Privilege Escalation
Medium
CVE-2024-49631
Easy Addons for Elementor <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49334
jLayer Parallax Slider <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2024-49620
FERMA.ru.net <= 1.3.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-9593
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
High
CVE-2024-49612
SW Contact Form <= 1.0 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.