Critical
CVE-2024-6924
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-6798
DL Verification <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6859
WP MultiTasking <= 0.1.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-7648
Opal Membership <= 1.2.4 - Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2024-7621
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Critical
CVE-2024-7503
WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
Medium
CVE-2024-7649
Opal Membership <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-43227
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43233
BSK Forms Blacklist <= 3.8 - Reflected Cross-Site Scripting
Low
CVE-2024-6692
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text
Medium
CVE-2024-43230
Shared Files <= 1.7.28 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-43232
Timeline and History slider <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43219
Persian WooCommerce <= 7.1.6 - Missing Authorization
Medium
CVE-2024-43218
Mediavine Control Panel <= 2.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-3673
Web Directory Free <= 1.7.2 - Unauthenticated Local File Inclusion
Medium
CVE-2024-43213
WC Marketplace <= 4.1.17 - Reflected Cross-Site Scripting
Medium
CVE-2024-43210
LA-Studio Element Kit for Elementor <= 1.3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43217
Kodex Posts likes <= 2.5.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-43216
Filr – Secure document library <= 1.2.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43220
Form Maker by 10Web <= 1.15.26 - Reflected Cross-Site Scripting
Medium
CVE-2024-7574
Christmasify! <= 1.5.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-43236
Easy PayPal Buy Now Button <= 1.9 - Unauthenticated Open Redirect
Medium
CVE-2024-43214
myCred <= 2.7.2 - Unauthenticated Information Exposure
Medium
CVE-2024-43235
Meta Box – WordPress Custom Fields Framework <= 5.9.10 - Missing Authorization to Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.