Medium
CVE-2024-44036
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-8680
MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-8085
PeoplePond <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-6486
ImageMagick Engine <= 1.7.10 - Authenticated (Administrator+) Remote Code Execution
Critical
CVE-2024-8911
LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection
Medium
CVE-2024-8398
Simple Nav Archives <= 2.1.3 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-8702
Backup Database <= 4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-9156
TI WooCommerce Wishlist <= 2.9.0 - Unauthenticated SQL Injection via 'lang'
Medium
CVE-2024-8364
WP Custom Fields Search <= 1.2.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcfs-preset Shortcode
Medium
CVE-2022-4533
Limit Login Attempts Plus <= 1.1.0 - IP Address Spoofing to Protection Mechanism Bypass
Medium
CVE-2024-9838
Auto Affiliate Links <= 6.4.6 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-42404
Welcart e-Commerce <= 2.11.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-8850
MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting
High
CVE-2024-9796
WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection
Critical
CVE-2024-8853
Webo-facto <= 1.40 - Unauthenticated Privilege Escalation
Medium
CVE-2024-8983
Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6641
WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration
High
CVE-2024-22303
Houzez <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-9021
Relevanssi – A Better Search <= 4.23.0 (Free) and <= 2.26.0 (Premium) - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-8761
Share This Image <= 2.03 - Open Redirect via link Parameter
Medium
CVE-2024-44008
Geo Mashup <= 1.13.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-45451
Roseta <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44050
Verbosa <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44007
SKT Templates – Elementor & Gutenberg templates <= 6.14 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.