Hoch
CVE-2024-49649
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 4.498
Filter zurücksetzen
Hoch
CVE-2024-12152
MIPL WC Multisite Sync <= 1.1.5 - Unauthenticated Arbitrary File Download
Hoch
CVE-2024-53800
Rezgo Online Booking <= 4.17 - Unauthenticated Local File Inclusion
Mittel
CVE-2024-12047
WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter
Mittel
CVE-2024-12237
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.15 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
Hoch
CVE-2024-56282
WPMozo Addons Lite for Elementor <= 1.1.0 - Authenticated (Contributor+) Local File Inclusion
Kritisch
CVE-2024-51919
Fancy Product Designer <= 6.4.3 - Unauthenticated Arbitrary File Upload
Kritisch
CVE-2025-22364
Ach Invoice App <= 1.0.1 - Unauthenticated Local File Inclusion
Kritisch
CVE-2025-22654
Simplified Plugin <= 1.0.6 - Unauthenticated Arbitrary File Upload
Kritisch
CVE-2025-22311
Private Messages for UserPro <= 4.10.0 - Unauthenticated Local File Inclusion
Hoch
CVE-2024-56281
워드프레스 결제 심플페이 <= 5.2.0 - Authenticated (Contributor+) Local File Inclusion
Kritisch
CVE-2024-12583
Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection
Mittel
CVE-2024-56279
Compact WP Audio Player <= 1.9.14 - Authenticated (Contributor+) Server-Side Request Forgery
Mittel
CVE-2024-56275
Envato Elements <= 2.0.14 - Authenticated (Author+) Server-Side Request Forgery
Mittel
CVE-2024-56278
WP Ultimate Exporter <= 2.9.1 - Authenticated (Admin+) Remote Code Execution
Kritisch
CVE-2024-43243
JobBoard Job listing <= 1.2.6 - Unauthenticated Arbitrary File Upload
Mittel
CVE-2025-22346
Course Migration for LearnDash <= 1.0.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Hoch
CVE-2024-56286
Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Editor+) Local File Inclusion
Mittel
CVE-2024-56248
WPMasterToolKit <= 1.13.1 - Authenticated (Admin+) Arbitrary File Download
Hoch
CVE-2024-56264
ACF City Selector <= 1.14.0 - Authenticated (Admin+) Arbitrary File Upload
Hoch
CVE-2024-56249
WPMasterToolKit <= 1.13.1 - Authenticated (Admin+) Arbitrary File Upload
Hoch
CVE-2024-12272
WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion
Mittel
CVE-2024-12850
Database Backup and check Tables Automated With Scheduler 2024 <= 2.32 - Authenticated (Admin+) Arbitrary File Read
Mittel
CVE-2024-12103
Content No Cache: prevent specific content from being cached <= 0.1.2 - Unauthenticated Private Content Disclosure
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.