High
CVE-2024-43249
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-43266
WP Job Portal <= 2.1.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-43268
Backup and Restore WordPress <= 1.50 - Missing Authorization
Medium
CVE-2024-7354
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-43246
WHMpress <= 6.2-revision-5 - Reflected Cross-Site Scripting
High
CVE-2024-43250
Bit Form Pro <= 2.6.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Critical
CVE-2024-43240
Indeed Membership Pro <= 12.7 - Unauthenticated Privilege Escalation
Medium
CVE-2024-43258
Store Locator Plus <= 2311.17.01 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-43256
Leopard - WordPress offload media <= 2.0.36 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-43254
Smart Online Order for Clover <= 1.5.6 - Missing Authorization
Medium
CVE-2024-43244
Houzez <= 3.2.4 - Reflected Cross-Site Scripting
Critical
CVE-2024-43261
Compute Links <= 1.2.1 - Unauthenticated Remote File Inclusion
Medium
CVE-2024-43253
Smart Online Order for Clover <= 1.5.6 - Missing Authorization
High
CVE-2024-7691
Flaming Forms <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-43242
Indeed Membership Pro <= 12.7 - Unauthenticated PHP Object Injection
Medium
CVE-2024-43265
Analytify <= 5.3.1 - Cross-Site Request Forgery to Opt-out
Medium
CVE-2024-43259
Order Export for WooCommerce <= 3.23 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-43262
Busiprof <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43257
Leopard - WordPress offload media <= 2.0.36 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-6853
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Welcome Popup Update
Medium
CVE-2024-7556
Wordpress Simple Share Plugin <= 0.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6925
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-6856
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to SMTP Settings Update
Critical
CVE-2024-6928
Opti Marketing <= 2.0.9 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.