Medium
CVE-2024-8494
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-0804
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24689
Import and export users and customers <= 1.27.12 - Unauthenticated Sensitive Information Disclosure
High
CVE-2024-11135
Eventer <= 3.9.8 - Unauthenticated SQL Injection via eventer_get_attendees
High
CVE-2024-13726
Themes Coder <= 1.3.4 - Unauthenticated SQL Injection
Medium
CVE-2024-13608
Track Logins <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2024-10628
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id
Medium
CVE-2024-11090
Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
High
CVE-2024-13562
Import WP – Export and Import CSV and XML files to WordPress <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2025-24663
Simple Download Monitor <= 3.9.25 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-24728
Bug Library <= 2.1.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-24672
Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-24669
SERPed.net <= 4.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-24705
WooCommerce Quick View <= 1.1.1 - Unauthenticated Information Disclosure
Medium
CVE-2025-24659
Premium Packages <= 5.9.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-24587
Email Subscription Popup <= 1.2.23 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-24582
12 Step Meeting List <= 3.16.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-24683
RSVP and Event Management Plugin <= 2.7.14 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-10324
RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-13680
Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-13594
Simple Downloads List <= 1.4.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-13236
Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-13234
Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection
High
CVE-2024-13496
GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.