Medium
CVE-2024-12814
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-12617
WC Price History for Omnibus <= 2.1.3 - Missing Authorization
Medium
CVE-2024-12622
WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11636
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Text Block
Medium
CVE-2024-12031
Advanced Floating Content <= 3.8.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-12594
ALL In One Custom Login Page <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+)Privilege Escalation
Medium
CVE-2024-12210
Print Invoice & Delivery Notes for WooCommerce <= 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Logo Deletion
Medium
CVE-2024-12566
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-11726
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12568
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Workflow Settings
Medium
CVE-2024-10584
DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-8721
Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12274
BookingPress <= 1.1.22 - Unauthenticated File Export Download
Medium
CVE-2024-11885
NinjaTeam Chat for Telegram <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12567
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Form Settings
Medium
CVE-2024-12518
shMapper by Teplitsa <= 1.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11896
Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12710
WP-Appbox <= 4.5.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12034
Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock
Medium
CVE-2024-12268
Responsive Blocks – WordPress Gutenberg Blocks <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12266
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.7 - Missing Authorization
Medium
CVE-2024-11230
Elementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget
Medium
CVE-2025-24590
picu – Online Photo Proofing Gallery <= 2.4.0 - Missing Authorization
Medium
CVE-2025-24598
WP Mailster <= 1.8.17.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.