Critical
CVE-2024-38788
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Critical
CVE-2024-38773
FormLift for Infusionsoft Web Forms <= 7.5.17 - Unauthenticated SQL Injection
Medium
CVE-2024-38769
Arconix Shortcodes <= 2.1.11 - Missing Authorization
Medium
CVE-2024-38783
Arconix FAQ <= 1.9.4 - Missing Authorization
High
CVE-2024-6338
FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter
Critical
CVE-2024-6457
HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection
Medium
CVE-2024-6477
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.11 - Unauthenticated Information Disclosure via Unprotected Directories
High
CVE-2024-6353
Wallet for WooCommerce <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search[value]'
Medium
CVE-2024-38756
Coming Soon <= 1.6.3 - Unauthenticated Information Exposure
High
CVE-2024-5325
Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data
High
CVE-2024-38708
Barcode Scanner with Inventory & Order Manager <= 1.6.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-38749
Olive One Click Demo Import <= 1.1.2 - Unauthenticated Information Exposure
Medium
CVE-2024-38742
MBE eShip <= 2.1.2 - Information Exposure
Medium
CVE-2024-38702
Product Delivery Date for WooCommerce – Lite <= 2.7.2 - Missing Authorization
Critical
CVE-2024-38755
DirectoryPress <= 3.6.10 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-6666
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id
Critical
CVE-2024-38692
Spiffy Calendar <= 4.9.11 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-38691
Metorik – Reports & Email Automation for WooCommerce <= 1.7.1 - Cross-Site Request Forgery
Critical
CVE-2024-37564
PayPlus Payment Gateway <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-5975
CZ Loan Management <= 1.1 - Unauthenticated SQL Injection
Medium
CVE-2024-37924
WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Unauthenticated Information Exposure
Critical
CVE-2024-5765
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Unauthenticated SQL Injection
Medium
CVE-2024-1287
Paid Memberships Pro - Member Directory Add On < 1.2.6 - Authenticated (Contributor+) Information Exposure
Critical
CVE-2024-37933
Woocommerce OpenPos <= 6.4.4 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.