High
CVE-2024-12024
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2024-12293
User Role Editor <= 4.64.3 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-12220
SMS for WooCommerce <= 2.8.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12219
Stop Registration Spam <= 1.23 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2024-9624
WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import
Medium
CVE-2024-12239
PowerPack Lite for Beaver Builder <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameter
Medium
CVE-2024-11902
Slope Widgets <= 4.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11905
Animated Counters <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11906
TPG Get Posts <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11900
Portfolio – Filterable Masonry Portfolio Gallery for Professionals <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12443
CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51646
Saoshyant Element <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-11280
PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-11849
Pods – Custom Content Types and Fields <= 3.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-56014
Olivia <= 0.9.5 - Reflected Cross-Site Scripting
Low
CVE-2024-9654
Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass
Medium
CVE-2024-10356
ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-12395
WooCommerce Additional Fees On Checkout (Free) <= 1.4.7 - Reflected Cross-Site Scripting via 'number'
Medium
CVE-2024-12302
Icegram Engage <= 3.1.31 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-56015
Tidy Up <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2024-12311
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.43 - Authenticated (Admin+) SQL Injection
High
CVE-2024-8326
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-52485
WP Menu Image <= 2.2 - Missing Authorization to Unauthenticated Menu Image Deletion
Medium
CVE-2024-12601
Calculated Fields Form <= 5.2.63 - Denial of Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.