High
CVE-2024-2890
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
Medium
CVE-2024-2951
RegistrationMagic <= 5.3.0.0 - Cross-Site Request Forgery
Medium
CVE-2024-30232
Exclusive Addons Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-22300
Email Subscribers & Newsletters <= 5.7.11 - Reflected Cross-Site Scripting via campaign_id
High
CVE-2024-30222
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.26 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-2956
Simple Ajax Chat <= 20231101 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-28004
Colibri Page Builder <= 1.0.248 - Missing Authorization
Critical
CVE-2024-30226
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg <= 3.3.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-2139
Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
Medium
CVE-2024-2121
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1790
Ajax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read
Critical
CVE-2024-30243
WordPress Tooltips <= 9.4.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-2693
Link Whisper Free <= 0.7.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-2904
Calliope <= 1.0.33 - Cross-Site Request Forgery
Critical
CVE-2024-30236
Photos and Files Contest Gallery <= 21.3.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-30233
WholesaleX <= 1.3.1 - Sensitive Information Exposure via export_users
Critical
CVE-2024-30221
Sunshine Photo Cart: Free Client Photo Galleries for Photographers <= 3.1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-6799
WP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomness
Medium
CVE-2024-30234
WholesaleX <= 1.3.1 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX actions
High
CVE-2024-1990
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode
High
CVE-2024-30228
Hercules Core <= 6.4 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-22299
FV Flowplayer Video Player <= 7.5.41.7212 - Reflected Cross-Site Scripting
Medium
CVE-2024-22288
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-2781
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.