Medium
CVE-2024-33543
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-33566
OrderConvo <= 12.4 - Missing Authorization to Arbitrary File Upload
High
CVE-2024-3500
ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets
Critical
CVE-2024-33560
XStore <= 9.3.8 - Unauthenticated Local File Inclusion
High
CVE-2024-33557
XStore Core <= 5.3.8 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2024-33644
Customify Site Library <= 0.0.9 - Unauthenticated Remote Code Execution
High
CVE-2024-33628
XforWooCommerce <= 2.0.2 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2024-3962
Product Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file
A critical arbitrary file upload vulnerability in the Product Addons & Fields for WooCommerce WordPress plugin allows unauthenticated attackers to upload arbitrary files and potentially execute remote code when PPOM Pro and a product with a file upload field are present.
Medium
CVE-2024-33590
Knowledge Base documentation & wiki plugin – BasePress <= 2.16.1 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2024-33541
Better Elementor Addons <= 1.4.1 - Authenticated(Contributor+) Local File Inclusion
High
CVE-2024-33592
Radio Player <= 2.0.73 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2024-33556
XStore Core <= 5.3.8 - Authenticated (Subscriber+) Limited Arbitrary File Upload
Critical
CVE-2024-33568
Element Pack Pro <= 7.19.2 - Authenticated (Contributor+) Arbitrary File Read and PHAR Deserialization
High
CVE-2024-33634
Piotnet Addons For Elementor Pro <= 7.1.17 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-33629
Auto Featured Image (Auto Post Thumbnail) <= 4.1.3 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2024-33627
Absolutely Glamorous Custom Admin <= 7.2.3 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2024-3047
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2024-32954
Newsletters <= 4.9.5 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-32955
FV Flowplayer Video Player <= 7.5.43.7212 - Authenticated (Subscriber+) Server-side Request Forgery
High
CVE-2024-32836
WP-Lister Lite for eBay <= 3.5.11 - Authenticated (Shop Manager+) Arbitrary File Upload
High
CVE-2024-3499
ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module
Medium
CVE-2024-32819
Culqi <= 3.0.14 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2024-32809
ActiveDEMAND <= 0.2.41 - Unauthenticated Arbitrary File Upload
High
CVE-2024-32729
Conversational Forms for ChatBot <= 1.1.8 - Unauthenticated Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.