Mittel
CVE-2024-11267
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 4.073
Filter zurücksetzen
Mittel
CVE-2024-11269
AHAthat Plugin <= 1.6 - Authenticated (Admin+) SQL Injection
Mittel
CVE-2025-24597
Barcode Generator for WooCommerce – Show barcodes on products, orders, invoices and other pages <= 2.0.2 - Authenticated (Subscriber+) Sensitive Information Disclosure
Mittel
CVE-2024-10862
NEX-Forms <= 8.7.15 - Authenticated (Admin+) SQL Injection
Hoch
CVE-2024-12428
WP Data Access – App, Table, Form and Chart Builder plugin <= 5.5.22 - Unauthenticated SQL Injection
Mittel
CVE-2024-12335
Avada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosure
Mittel
CVE-2024-12032
Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection
Mittel
CVE-2024-10856
Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection
Mittel
CVE-2024-12103
Content No Cache: prevent specific content from being cached <= 0.1.2 - Unauthenticated Private Content Disclosure
Mittel
CVE-2024-12031
Advanced Floating Content <= 3.8.2 - Authenticated (Subscriber+) SQL Injection
Mittel
CVE-2024-11726
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection
Mittel
CVE-2024-8721
Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-11722
Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection
Mittel
CVE-2024-10797
Full Screen Menu for Elementor <= 1.0.7 - Authenticated (Contributor+) Post Disclosure
Mittel
CVE-2024-12635
WP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'
Mittel
CVE-2024-11331
isee-products-extractor <= 2.1.3 - Reflected Cross-Site Scripting
Mittel
CVE-2024-54222
Seraphinite Accelerator <= 2.22.15 (2.21.13 PRO) - Authenticated (Subscriber+) Information Exposure
Mittel
CVE-2024-56212
Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection
Mittel
CVE-2025-24586
Shipment Tracker for Woocommerce <= 1.4.23 - Reflected Cross-Site Scripting
Mittel
CVE-2024-11297
Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Mittel
CVE-2024-12560
Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Mittel
CVE-2024-10548
WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
Mittel
CVE-2024-12250
Accept Authorize.NET Payments Using Contact Form 7 <= 2.2 - Unauthenticated Information Exposure
Hoch
CVE-2024-11912
Traveler <= 3.1.6 - Unauthenticated SQL Injection via order_id
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.