Critical
CVE-2024-38788
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-38782
Leaflet Maps Marker <= 3.12.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-38773
FormLift for Infusionsoft Web Forms <= 7.5.17 - Unauthenticated SQL Injection
Medium
CVE-2024-6560
Addonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure
Medium
CVE-2024-38781
CopySafe Web Protection <= 3.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-38786
CoziPress <= 1.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-38784
Livemesh Addons for Beaver Builder <= 3.6.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-38771
Atarim <= 4.0 - Missing Authorization
Medium
CVE-2024-5804
Conditional Fields for Contact Form 7 <= 2.4.13 - Cross-Site Request Forgery to Plugin Setting Reset
Critical
CVE-2024-6636
WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation
Medium
CVE-2024-38774
Security Optimizer – The All-In-One Protection Plugin <= 1.5.0 - Missing Authorization via hide_notice()
Medium
CVE-2024-38769
Arconix Shortcodes <= 2.1.11 - Missing Authorization
High
CVE-2024-38772
JetWidgets for Elementor and WooCommerce <= 1.1.7 - Authenticated (Contributor+) Limited Local File Inclusion
Medium
CVE-2024-38783
Arconix FAQ <= 1.9.4 - Missing Authorization
Medium
CVE-2024-38785
Gutenverse <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-6635
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass
Medium
CVE-2024-6133
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Customer Search
Medium
CVE-2024-38776
WP GoToWebinar <= 15.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Low
CVE-2024-6694
WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure
Medium
CVE-2024-2337
Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-6134
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Product Editing
High
CVE-2024-6637
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password
Medium
CVE-2024-38778
WP Fast Total Search <= 1.69.234 - Cross-Site Request Forgery
Medium
CVE-2024-6158
Category Posts Widget <= 4.9.16 & Pro < 4.9.13 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.