Medium
CVE-2024-9064
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-9065
WP Helper Premium <= 4.6.1 - Missing Authorization in whp_smtp_send_mail_test
Medium
CVE-2024-9066
Marketing and SEO Booster <= 1.9.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9072
GDPR-Extensions-com – Consent Manager <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9074
Advanced Blocks Pro <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9520
UserPlus <= 2.0 - Missing Authorization via Multiple Functions
Medium
CVE-2024-48023
Restaurant Reservations Widget <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-8477
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery
Medium
CVE-2024-8444
Download Manager <= 3.2.99 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-48029
SB Random Posts Widget <= 1.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-48038
wp-Monalisa <= 6.4 - Cross-Site Request Forgery
High
CVE-2024-9022
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter
Critical
CVE-2024-48030
Telecash Ricaricaweb <= 2.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-48026
Disc Golf Manager <= 1.0.0 - Unauthenticated PHP Object Injection
High
CVE-2024-9575
pretix widget <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-48037
Contact Form Widget <= 1.4.2 - Cross-Site Request Forgery
Medium
CVE-2024-48032
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9685
Notification for Telegram <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Send Telegram Test Message
Critical
CVE-2024-48033
Talkback <= 1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-48024
Keep Backup Daily <= 2.0.8 - Unauthenticated Information Disclosure
Medium
CVE-2024-48036
SKT Blocks <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-48040
Tainacan <= 0.21.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-9377
Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting
High
CVE-2024-48034
Creates 3D Flipbook, PDF Flipbook <= 1.2 - Authenticated (Subscriber+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.