High
CVE-2024-47309
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-47319
Bit Form – Contact Form Plugin <= 2.13.10 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2024-47310
ARI Fancy Lightbox <= 1.3.17 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-47314
Sunshine Photo Cart <= 3.2.8 - Missing Authorization
Medium
CVE-2024-47329
ElementsReady Addons for Elementor <= 6.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47328
Automation By Autonami <= 3.1.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-47306
Secure Copy Content Protection and Content Locking <= 4.2.3 - Reflected Cross-Site Scripting
High
CVE-2024-8126
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-47315
GiveWP <= 3.15.1 - Cross-Site Request Forgery
Medium
CVE-2024-47327
GEO my WordPress <= 4.5.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-47318
PWA for WP & AMP <= 1.7.72 - Missing Authorization
Medium
CVE-2024-47320
WS Form LITE <= 1.9.238 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-8872
Store Hours for WooCommerce <= 4.3.20 - Reflected Cross-Site Scripting
Medium
CVE-2024-47316
Salon booking system <= 10.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-47396
Move Addons for Elementor <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47308
Templately <= 3.1.2 - Missing Authorization
Medium
CVE-2024-47326
Share This Image <= 2.01 - Reflected Cross-Site Scripting
High
CVE-2024-8704
Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
Medium
CVE-2024-47317
Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads <= 2.0.84 - Missing Authorization
Medium
CVE-2024-8552
Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable
Medium
CVE-2024-47321
WP Datepicker <= 2.1.1 - Missing Authorization
Medium
CVE-2024-47307
Meta slider and carousel with lightbox <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-47322
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-47312
Classic Editor and Classic Widgets <= 1.4.1 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.