Critical
CVE-2024-37212
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-37207
Demo Awesome <= 1.0.2 - Missing Authorization
Medium
CVE-2024-37113
WishList Member X < 3.26.7 - Unauthenticated Information Exposure
Medium
CVE-2024-4655
Ultimate Blocks – WordPress Blocks Plugin <= 3.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37122
Accordions <= 2.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37206
Demo Awesome <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-37203
Laybuy Payment Extension for WooCommerce <= 5.3.9 - Missing Authorization
Medium
CVE-2024-37202
Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter <= 1.222.17 - Missing Authorization
Medium
CVE-2024-37208
WP Scraper <= 5.8 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2024-6025
Quiz and Survey Master <= 9.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5945
WP SVG Images <= 4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-37100
Elegant Themes Icons <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5191
Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Medium
CVE-2024-5444
Bible Text <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37097
Shortcodes by United Themes < 5.0.5 - Reflected Cross-Site Scripting
High
CVE-2024-37092
Consulting Elementor Widgets <= 1.3.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37094
MasterStudy LMS <= 3.2.12 - Missing Authorization
High
CVE-2024-37108
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2024-37090
Consulting Elementor Widgets <= 1.3.0 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-37112
WishList Member X <= 3.25.1 - Unauthenticated Arbitrary SQL Execution
Medium
CVE-2024-37115
Newspack Blocks <= 3.0.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-37103
Education Zone <= 1.3.4 - Cross-Site Request Forgery to Notice Dismissal
Medium
CVE-2024-37111
WishList Member X < 3.26.7 - Unauthenticated Denial of Service
Medium
CVE-2024-6225
Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.