High
CVE-2024-49622
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-8378
Safe SVG <= 2.2.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-10027
WP Booking Calendar <= 10.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-9703
Arconix Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-9206
MAS Companies For WP Job Manager <= 1.0.13 - Reflected Cross-Site Scripting
Medium
CVE-2024-10078
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
High
CVE-2024-10079
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-49327
Woostagram Connect <= 1.0.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-49607
WP Dropbox Dropins <= 1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-49325
Photo Gallery Builder <= 3.0 - Missing Authorization
Critical
CVE-2024-49332
Giveaway Boost <= 2.1.4 - Unauthenticated PHP Object Injection
Critical
CVE-2024-49611
Product Website Showcase <= 1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-10076
Jetpack <= 13.7 & Jetpack Boost <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10075
Jetpack <= 13.7 - Unauthenticated Arbitrary Block & Shortcode Execution
Critical
CVE-2024-49326
Affiliator <= 2.1.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-49610
photokit <= 1.0 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-49324
Sovratec Case Management <= 1.0.0 - Unauthenticated Arbitrary File Upload
High
CVE-2024-49330
Nice Backgrounds <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-49331
Property Lot Management System <= 1.0 - Authenticated (Salesman+) Arbitrary File Upload
Critical
CVE-2024-49328
WP REST API FNS <= 1.0.0 - Privilege Escalation
Medium
CVE-2024-10080
WP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
Critical
CVE-2024-49604
Simple User Registration <= 6.7 - Missing Authorization to Account Takeover
Medium
CVE-2024-49323
All in One Slider <= 1.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-49329
WP REST API FNS <= 1.0.0 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.