High
CVE-2024-7486
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-7560
News Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2024-7355
Organization chart <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description Parameters
Medium
CVE-2024-43156
Post Grid Master <= 3.4.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-43162
Easy Digital Downloads <= 3.2.12 - Missing Authorization
Medium
CVE-2024-43130
Football Pool <= 2.11.10 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43146
AMP for WP <= 1.0.96.1 - Missing Authorization
Medium
CVE-2024-43134
Waitlist Woocommerce ( Back in stock notifier ) <= 2.6 - Missing Authorization
Medium
CVE-2024-43159
Masteriyo - LMS <= 1.11.6 - Missing Authorization
Medium
CVE-2024-43120
TypeSquare Webfonts <= 2.0.7 - Missing Authorization via typesquare_admin_init()
Medium
CVE-2024-43127
Products, Order & Customers Export for WooCommerce <= 2.0.11 - Reflected Cross-Site Scripting
High
CVE-2024-43135
WPCafe <= 2.2.28 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43155
ComboBlocks <= 2.2.86 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7492
MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2024-6869
Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure
Medium
CVE-2024-43142
Tutor LMS <= 2.7.3 - Missing Authorization
Medium
CVE-2024-43124
Graphina <= 1.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43123
Card Elements for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-38787
Import and export users and customers <= 1.26.8 - Unauthenticated Information Exposure
Medium
CVE-2024-43157
FormCraft <= 1.2.10 - Missing Authorization
Medium
CVE-2024-6824
Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update
Medium
CVE-2024-43139
Football Pool <= 2.11.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-43148
StreamCast <= 2.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2024-7561
The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.