Medium
CVE-2024-12030
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2024-11939
Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via data
Medium
CVE-2025-22536
WP Music Player <= 1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-22537
Google Maps Travel Route <= 1.3.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22533
WOOEXIM <= 5.0.0 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-22542
Virtual Bot <= 1.0.0 - Unauthenticated SQL Injection
Medium
CVE-2025-22502
MindValley Super PageMash <= 1.1 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-22519
eDoc Easy Tables <= 1.29 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-22535
WPListCal <= 1.3.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-22553
Multiple Carousel <= 2.0 - Unauthenticated SQL Injection
High
CVE-2025-22540
Emailing Subscription <= 1.4.1 - Unauthenticated SQL Injection
Medium
CVE-2025-22527
Mailing Group Listserv <= 2.0.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-22507
WPMU Prefill Post <= 1.02 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-12332
School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection
Medium
CVE-2024-12140
Elementor AI Addons – 70 Widgets, Premium Templates, Ultimate Elements <= 2.2.1 - Authenticated (Contributor+) Private Templates Content Disclosure
Medium
CVE-2024-12159
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords <= 3.1 - Information Exposure
Medium
CVE-2024-11290
Member Access <= 1.1.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
High
CVE-2024-12157
Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Unauthenticated SQL Injection
Medium
CVE-2024-11437
Timeline Designer <= 1.4 - Authenticated (Admin+) SQL Injection
High
CVE-2024-12416
Woomotiv <= 3.6.1 - Unauthenticated SQL Injection
Medium
CVE-2024-12538
Duplicate Post, Page and Any Custom Post <= 3.5.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Medium
CVE-2024-51715
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12773
Altra Side Menu <= 2.0 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-22306
Link Whisper Free <= 0.7.8 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.