Critical
CVE-2024-43976
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-43984
Podlove Podcast Publisher <= 4.1.13 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2024-43969
Spiffy Calendar <= 4.9.12 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-43974
ReviveNews <= 1.0.2 - Missing Authorization via revivenews_install_and_activate_plugins()
Medium
CVE-2024-43972
PageLayer <= 1.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-7606
Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-43968
Newspack <= 3.8.6 - Missing Authorization
Medium
CVE-2024-8051
Special Feed Items <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2024-8030
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-8093
Posts reminder <= 0.20 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-8043
Vikinghammer Tweet <= 0.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-6311
Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2024-7573
Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection
Medium
CVE-2024-8195
Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure
High
CVE-2025-52758
Zippy <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2024-7447
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload
Medium
CVE-2024-8052
Review Ratings <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-8092
Accordion Image Menu <= 3.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-6312
Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2024-8047
Visual Sound (old) <= 1.06 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-5170
Logo Manager For Enamad <= 0.7.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8044
infolinks Ad Wrap <= 1.0.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-8091
Enhanced Search Box <= 0.6.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-6448
Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.