High
CVE-2024-12313
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2025-21612
Extension:TabberNeue vulnerable to Cross-site Scripting
Medium
CVE-2024-11337
Horoscope And Tarot <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12288
Simple add pages or posts <= 2.0.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-11382
Common Ninja: Fully Customizable & Perfectly Responsive Free Widgets for WordPress Websites <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12157
Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Unauthenticated SQL Injection
Medium
CVE-2024-12324
Unilevel MLM Plan <= 1.1.0 - Reflected Cross-Site Scripting via 'page'
Critical
CVE-2024-12252
SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)
Medium
CVE-2024-11378
Bizapp for WooCommerce <= 2.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-12176
WordLift – AI powered SEO – Schema <= 3.54.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-11377
Automate Hub Free by Sperse.IO <= 1.7.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-12327
LazyLoad Background Images <= 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
Medium
CVE-2024-12170
ViewMedica Embed <= 1.4.15 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2024-12291
ViewMedica 9 <= 1.4.17 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12153
GDY Modular Content <= 0.9.92 - Reflected Cross-Site Scripting
Medium
CVE-2024-11375
WC1C <= 0.23.0 - Reflected Cross-Site Scripting
High
CVE-2024-12322
ThePerfectWedding.nl Widget <= 2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-11465
Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection
Low
CVE-2024-10527
Spacer <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Limited Information Disclosure
Medium
CVE-2024-9208
Enable Accessibility <= 1.4.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-12402
Themes Coder – Create Android & iOS Apps For Your Woocommerce Site <= 1.3.4 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation
Medium
CVE-2024-11437
Timeline Designer <= 1.4 - Authenticated (Admin+) SQL Injection
High
CVE-2024-12416
Woomotiv <= 3.6.1 - Unauthenticated SQL Injection
Medium
CVE-2024-12541
Chative Live chat and Chatbot <= 1.1 - Cross-Site Request Forgery via add_chative_widget_action Function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.