High
CVE-2024-3812
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Critical
CVE-2024-32600
Master Slider <= 3.9.5 - Unauthenticated PHP Object Injection
High
CVE-2023-7064
Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer
High
CVE-2024-29800
Timber <= 1.23.0 - Authenticated (Admin+) PHP Object Injection
High
CVE-2024-32431
Import Users from CSV <= 1.2 - Authenticated (Admin+) PHP Object Injection
High
CVE-2024-3054
WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2024-2867
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3210
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'reg-single-checkbox'
High
CVE-2024-4439
WordPress Core < 6.5.2 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block
High
CVE-2024-3020
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injection
Medium
63f26380-0bc2-4fe7-9e9d-05c688c201f9
Gutenberg 12.9.0 - 18.0.0 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block
Medium
CVE-2024-31358
5 star review funnel for Google Reviews, Trustpilot, ProvenExpert and more | RRatingg <= 1.2.67 - Missing Authorization
High
CVE-2024-31308
WP Import Export Lite <= 3.9.26 - Authenticated (Administrator+) PHP Object Injection
Critical
CVE-2024-31277
Product Designer <= 1.0.32 - Unauthenticated PHP Object Injection
High
CVE-2024-2008
Modal Popup Box – Popup Builder, Show Offers And News in Popup <= 1.5.2 - Authenticated (Contributor+) PHP Object Injection in awl_modal_popup_box_shortcode
High
CVE-2024-1792
CMB2 <= 2.10.1 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-31094
Filter Custom Fields & Taxonomies Light <= 1.05 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-3018
Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword
High
CVE-2024-1872
Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode
Medium
CVE-2024-1858
Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-2501
Hubbub Lite – Fast, Reliable Social Network Sharing Buttons <= 1.33.1 - PHP Object Injection
High
CVE-2024-1770
Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2024-30230
PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-30224
WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) <= 1.3.2 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.