High
CVE-2024-43957
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-43955
Droip < 2.5.2 - Unauthenticated Arbitrary File Deletion
High
CVE-2024-7129
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.42 - Authenticated (Admin+) Remote Code Execution
Critical
CVE-2024-7568
Favicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Deletion
Critical
CVE-2024-7772
Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload
High
CVE-2024-7258
WooCommerce Google Feed Manager <= 2.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Deletion
High
CVE-2024-7559
File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-7766
Adicon Server <= 1.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-8056
MM-Breaking News <= 0.7.9 - Reflected Cross-Site Scripting
High
CVE-2024-8480
Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2024-7384
AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function
Critical
CVE-2024-6386
WPML Multilingual CMS <= 4.6.12 - Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection
Medium
CVE-2024-7775
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads
Critical
CVE-2024-7777
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion
High
CVE-2024-7782
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion
High
CVE-2022-1206
AdRotate – Ad manager & AdSense Ads <= 5.13.2 - Authenticated (Admin+) Double Extension Arbitrary File Upload
Medium
CVE-2024-6667
KBucket: Your Curated Content in WordPress <= 4.1.4 - Reflected Cross-Site Scripting
Critical
CVE-2024-6500
InPost for WooCommerce <= 1.4.0 and InPost PL <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary File Read and Delete
High
CVE-2024-43345
Landing Page Builder <= 1.5.2.0 - Authenticated (Editor+) Local File Inlcusion
Medium
CVE-2023-5505
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
Critical
CVE-2024-43328
EmbedPress <= 4.0.9 - Unauthenticated Local File Inclusion
High
CVE-2024-43281
Void Elementor Post Grid Addon for Elementor Page builder <= 2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-7146
JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion
High
CVE-2024-7145
JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.