High
CVE-2024-6809
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2024-4157
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues
High
CVE-2024-4352
Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection
High
CVE-2024-4318
Tutor LMS <= 2.7.0 - Authenticated (Instructor+) SQL Injection
High
CVE-2024-4847
Alt Text AI – Automatically generate image alt text for SEO and accessibility <= 1.4.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-0437
Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-34754
Contact Form Widget <= 1.3.9 - Sensitive Information Exposure
Medium
CVE-2024-4213
Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure
High
CVE-2024-3055
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-35171
Academy LMS <= 1.9.25 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-35165
Gutenify <= 1.4.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-4039
Orders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode Execution
Critical
CVE-2024-4434
LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection
Medium
CVE-2024-34812
ShopBuilder – Elementor WooCommerce Builder Addons <= 2.1.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-32100
Easy Digital Downloads <= 3.2.11 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-34549
WP Job Manager <= 2.2.2 - Unauthenticated Information Exposure
Medium
CVE-2024-34556
Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Unauthenticated Information Exposure
Medium
CVE-2024-34388
GDPR Compliance <= 1.2.5 - Authenticated (Subscriber+) Information Exposure
Critical
CVE-2024-4533
KKProgressbar2 Free <= 1.1.4.2 - Authenticated (Admin+) SQL Injection
Critical
CVE-2024-34412
Shipment Tracking, Tracking, and Order Tracking for WooCommerce – ParcelPanel (Free to install) <= 3.8.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-34431
WP etracker <= 1.0.2 - Reflected Cross-Site Scripting
Critical
CVE-2024-34386
Auto Affiliate Links <= 6.4.3.1 - Authenticated (Editor+) SQL Injection
Medium
CVE-2024-34368
Mooberry Book Manager <= 4.15.12 - Unauthenticated Information Exposure via Export Files
Medium
CVE-2024-34383
SEOPress <= 7.6.1 - Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.