Critical
CVE-2024-12209
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filters
Medium
CVE-2024-10858
Jetpack 13.0 - 14.0 - Reflected DOM-based Cross-Site Scripting
High
CVE-2024-9461
Total Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings
Critical
CVE-2024-8856
Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-52436
Post SMTP <= 2.9.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-9609
LearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-9765
EKC Tournament Manager <= 2.2.1 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-10962
Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection
High
CVE-2024-52415
SK WP Settings Backup <= 1.0 - Cross-Site Request Forgery to PHP Object Injection
Medium
CVE-2024-52390
CYAN Backup <= 2.5.3 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-10028
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log
High
CVE-2024-9162
All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection
Medium
CVE-2024-8852
All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs
High
CVE-2024-49684
Backup and Staging by WP Time Capsule <= 1.22.21 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2024-10076
Jetpack <= 13.7 & Jetpack Boost <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10075
Jetpack <= 13.7 - Unauthenticated Arbitrary Block & Shortcode Execution
High
CVE-2024-8746
File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload
Medium
CVE-2024-49256
Htaccess File Editor <= 1.0.18 - Missing Authorization
Medium
CVE-2024-9926
Jetpack < 13.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure
Medium
CVE-2024-48024
Keep Backup Daily <= 2.0.8 - Unauthenticated Information Disclosure
Medium
CVE-2024-48020
Backup and Staging by WP Time Capsule <= 1.22.21 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-8702
Backup Database <= 4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-8669
Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection
High
CVE-2024-7315
Migration, Backup, Staging – WPvivid <= 0.9.105 - Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.