High
CVE-2024-4611
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-3412
WP STAGING WordPress Backup Plugin – Migration Backup Restore <= 3.4.3 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2023-6743
Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import
Critical
CVE-2024-35629
Easy Digital Downloads – Recent Purchases <= 1.0.2 - Unauthenticated Remote File Inclusion
High
CVE-2024-35634
Woocommerce – Recent Purchases <= 1.0.1 - Authenticated (Admin+) Local File Inclusion
High
CVE-2024-1974
HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-1855
WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery
Critical
CVE-2024-5084
Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
High
CVE-2024-5031
MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
Critical
CVE-2024-5147
WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.37 - Unauthenticated Local File Inclusion
High
CVE-2024-34792
Dextaz Ping <= 0.65 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2024-35162
Download Plugins and Themes from Dashboard <= 1.8.5 - Authenticated (Admin+) Arbitrary File Download
Critical
CVE-2024-4620
ARForms Form Builder <= 6.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-4789
Cost Calculator Builder Pro <= 3.1.72 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2024-3551
Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion
High
CVE-2024-34762
Advanced Custom Fields Pro <= 6.2.9 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-34761
Advanced Custom Fields Pro <= 6.2.9 - Authenticated (Contributor+) Code Injection
High
CVE-2024-4670
All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode
Critical
CVE-2024-31351
Copymatic – AI Content Writer & Generator <= 1.6 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-32700
Kognetiks Chatbot for WordPress <= 2.0.0 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-4560
Kognetiks Chatbot for WordPress <= 1.9.9 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function
High
CVE-2024-4347
WP Fastest Cache <= 1.2.6 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2024-35172
ShortPixel Adaptive Images <= 3.8.3 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2024-4469
Migration Backup Restore <= 3.4.3 - Authenticated (Administrator+) Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.