Medium
CVE-2024-2579
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2024-1795
HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-27956
Automatic <= 3.92.0 - Unauthenticated SQL Injection
High
CVE-2023-7072
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint
High
CVE-2024-0368
Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys
Medium
CVE-2024-2107
Blossom Spa <= 1.3.3 - Sensitive Information Exposure
High
CVE-2024-1751
Tutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-5663
News Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-1083
Simple Restrict <= 1.2.6 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-2106
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route
Medium
CVE-2023-7232
Backup and Restore WordPress WordPress <= 1.45 - Unauthenticated Information Exposure via Log Files
Medium
CVE-2024-1381
Page Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure
Medium
CVE-2024-1088
Password Protected Store for WooCommerce <= 2.2 - Information Exposure via REST API
Medium
CVE-2024-0378
AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-1793
AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL Injection
Critical
CVE-2024-1981
WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection
High
CVE-2024-0786
Conversios <= 7.0.7 - Authenticated (Subscriber+) SQL Injection via ee_syncProductCategory
High
CVE-2024-1203
Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-6922
Under Construction / Maintenance Mode from Acurax <= 2.6 - Authenticated (Subscriber+) Sensitive Information Exposure
Critical
CVE-2024-1514
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
Medium
CVE-2024-23523
Elementor Pro <= 3.19.2 - Authenticated (Contributor+) Information Exposure
Critical
CVE-2024-1698
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection
Medium
CVE-2024-1435
Tainacan <= 0.20.6 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1436
WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit <= 1.0.9 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.