High
CVE-2024-9522
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-8759
Nested Pages <= 3.2.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-48039
CubeWP – All-in-One Dynamic Content Framework <= 1.1.15 - Missing Authorization
Critical
CVE-2024-9518
UserPlus <= 2.0 - Unauthenticated Privilege Escalation
Critical
CVE-2024-48028
IP Loc8 <= 1.1 - Unauthenticated PHP Object Injection
High
CVE-2024-48027
External featured image from bing <= 1.0.2 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2024-48041
CM Tooltip Glossary <= 4.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8513
QA Analytics <= 4.1.1.1 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2024-9519
UserPlus <= 2.0 - Authenticated (Editor+) Registration Form Update to Privilege Escalation
High
CVE-2024-48035
ACF Images Search And Insert <= 1.1.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-48031
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Cross-Site Request Forgery
Medium
CVE-2024-48025
Simple Baseball Scoreboard <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9451
Embed PDF Viewer <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via height and width Parameters
Medium
CVE-2024-9449
Auto iFrame <= 1.7 - Authenticated (Author+) Stored Cross-Site Scripting via tag Parameter
Medium
CVE-2024-48022
Shortcode For Elementor Templates <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-48020
Backup and Staging by WP Time Capsule <= 1.22.21 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-7963
CMSMasters Content Composer <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-8187
Smart Post Show <= 3.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Pagination Color
Medium
CVE-2024-48021
Contact Form 7 – PayPal & Stripe Add-on <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-8964
Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-8433
Easy Mega Menu Plugin for WordPress – ThemeHunk <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-8032
Smooth Gallery Replacement <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-9207
BuddyPress Docs <= 2.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-9529
Advanced Custom Fields <= 6.3.8 - Authenticated (Admin+) Limited Arbitrary Function Call
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.