High
CVE-2024-33550
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,504
Critical
CVE-2024-33566
OrderConvo <= 12.4 - Missing Authorization to Arbitrary File Upload
High
CVE-2024-33549
WooCommerce Amazon Affiliates - Wordpress Plugin < 14.1.00 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-33597
SSU <= 1.5.0 - Missing Authorization
Critical
CVE-2024-33546
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-33641
Custom field finder <= 0.3 - Authenticated (Author+) PHP Object Injection
Medium
CVE-2024-33649
Opal Widgets For Elementor <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33588
Knowledge Base documentation & wiki plugin – BasePress <= 2.16.1 - Missing Authorization
Critical
CVE-2024-33544
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Unauthenticated SQL Injection
High
CVE-2024-3500
ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets
Medium
CVE-2024-33639
PopupAlly <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-33553
XStore Core <= 5.3.8 - Unauthenticated PHP Object Injection
Medium
CVE-2024-33594
Leaky Paywall <= 4.20.8 - Missing Authorization to Price Manipulation
High
CVE-2024-3641
Newsletter Popup <= 1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-33558
XStore Core <= 5.3.8 - Authenticated (Subscriber+) Limited Arbitrary File Download
Medium
CVE-2024-3197
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Medium
CVE-2024-33652
Client Dash <= 2.2.1 - Missing Authorization
Medium
CVE-2024-3199
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Medium
CVE-2024-33562
XStore <= 9.3.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-3642
Newsletter Popup <= 1.2 - Cross-Site Request Forgery to Subscriber Deletion
Medium
CVE-2024-33640
Pretty Google Calendar <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-33560
XStore <= 9.3.8 - Unauthenticated Local File Inclusion
Medium
CVE-2024-33589
KB Support <= 1.6.0 - Missing Authorization
Medium
CVE-2024-33595
Master Addons for Elementor <= 2.0.5.4.1 - Missing Authorization on Duplicate Post
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.