Medium
CVE-2024-12736
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-56234
VW Automobile Lite <= 2.1.2 - Missing Authorization
Medium
CVE-2024-10815
PostLists <= 2.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-12715
Asgard Security Scanner <= 0.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-54222
Seraphinite Accelerator <= 2.22.15 (2.21.13 PRO) - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2024-56208
NewsDaily <= 1.0.64 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56226
Royal Elementor Addons <= 1.7.1001 - Reflected Cross-Site Scripting
Medium
CVE-2024-12717
Aklamator INfeed <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-56230
Dynamic Product Category Grid, Slider for WooCommerce <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-56229
SearchIQ <= 4.6 - Cross-Site Request Forgery
Medium
CVE-2025-24584
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.3.0 - Missing Authorization
Medium
CVE-2024-56212
Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-24586
Shipment Tracker for Woocommerce <= 1.4.23 - Reflected Cross-Site Scripting
Medium
CVE-2024-12714
Backlink Monitoring Manager <= 0.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-56265
WooCommerce PDF Vouchers < 4.9.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-11297
Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-56228
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-56225
Premium Addons for Elementor <= 4.10.56 - Missing Authorization
Medium
CVE-2024-56211
Userpro <= 5.1.9 - Missing Authorization
Critical
CVE-2024-12571
Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion
Medium
CVE-2024-56235
Coupon <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-56214
Userpro <= 5.1.9 - Unauthenticated Local File Inclusion
Medium
CVE-2024-56223
Gulri Slider <= 3.5.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-56215
Member Directory and Contact Form <= 1.7.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.