Medium
CVE-2024-47312
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Critical
CVE-2024-7385
WordPress Simple HTML Sitemap <= 3.1 - Authenticated (Admin+) SQL Injection
High
CVE-2024-8484
REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection
Critical
CVE-2024-8275
The Events Calendar <= 6.6.4 - Unauthenticated SQL Injection
Critical
CVE-2024-8621
Daily Prayer Time <= 2024.08.26 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-8483
MAS Static Content <= 1.0.8 - Authenticated (Contributor+) Private Static Content Page Disclosure
Medium
CVE-2024-8516
Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2024-8910
HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id
Critical
CVE-2024-8436
WP Easy Gallery – WordPress Gallery Plugin <= 4.8.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-8801
Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure
Critical
CVE-2024-8624
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-44045
WP Abstracts <= 2.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-9156
TI WooCommerce Wishlist <= 2.9.0 - Unauthenticated SQL Injection via 'lang'
Medium
CVE-2024-9838
Auto Affiliate Links <= 6.4.6 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-42404
Welcart e-Commerce <= 2.11.1 - Authenticated (Admin+) SQL Injection
High
CVE-2024-9796
WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection
High
CVE-2024-44004
WPCargo Track & Trace <= 8.0.3 - Unauthenticated SQL Injection
Critical
CVE-2024-8669
Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-43237
WordPress Tag Cloud Plugin – Tag Groups <= 2.0.3 - Missing Authorization to Information Exposure
Critical
CVE-2024-8522
LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'
High
CVE-2024-7315
Migration, Backup, Staging – WPvivid <= 0.9.105 - Sensitive Information Exposure
Critical
CVE-2024-8529
LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'
Medium
CVE-2019-25212
video carousel slider with lightbox <= 1.0.6 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-8379
Cost Calculator Builder <= 3.2.28 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.