High
CVE-2024-9796
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2024-8853
Webo-facto <= 1.40 - Unauthenticated Privilege Escalation
Medium
CVE-2024-8983
Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6641
WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration
High
CVE-2024-22303
Houzez <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-9021
Relevanssi – A Better Search <= 4.23.0 (Free) and <= 2.26.0 (Premium) - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-8761
Share This Image <= 2.03 - Open Redirect via link Parameter
Medium
CVE-2024-44008
Geo Mashup <= 1.13.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-45451
Roseta <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44050
Verbosa <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44007
SKT Templates – Elementor & Gutenberg templates <= 6.14 - Reflected Cross-Site Scripting
Medium
CVE-2024-45453
Maintenance Redirect <= 2.0.1 - IP Spoofing to Maintenance Mode Bypass
Medium
CVE-2024-45452
Septera <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8617
Quiz Maker <= 6.5.9.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-44003
Spice Starter Sites <= 1.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-44047
IMPress for IDX Broker <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44006
WooCommerce Multilingual & Multicurrency <= 5.3.6 - Missing Authorization
High
CVE-2024-44048
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-44009
WCFM Marketplace – Multivendor Marketplace for WooCommerce <= 3.6.11 - Reflected Cross-Site Scripting
Medium
CVE-2024-8286
GDPR Cookie Consent <= 2.6.0 - Cross-Site Request Forgery to Bulk Delete
Medium
CVE-2024-44005
Greenshift – animation and page builder blocks <= 9.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44002
Team Showcase <= 1.22.25 - Reflected Cross-Site Scripting
High
CVE-2024-8490
PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details
High
CVE-2024-44004
WPCargo Track & Trace <= 8.0.3 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.