High
CVE-2024-12627
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2024-12877
GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
Medium
CVE-2024-13098
WP Email Newsletter <= 1.1 - Reflected Cross-Site Scripting
Critical
CVE-2025-22777
GiveWP – Donation Plugin and Fundraising Platform <= 3.19.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-12473
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12606
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-6155
Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting
Critical
CVE-2024-11642
Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion
Medium
CVE-2024-12605
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.5 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2025-22508
FAT Event Lite <= 1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22593
Laika Pedigree Tree <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22595
Mailing Group Listserv <= 2.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2025-22800
Post SMTP <= 2.9.11 - Missing Authorization via regenerate_qrcode()
High
CVE-2025-22510
WC Price History for Omnibus <= 2.1.4 - Authenticated (Shop manager+) PHP Object Injection
Medium
CVE-2024-12713
SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure
High
CVE-2025-22540
Emailing Subscription <= 1.4.1 - Unauthenticated SQL Injection
Medium
CVE-2025-22802
Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22527
Mailing Group Listserv <= 2.0.9 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-12849
Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read
Medium
CVE-2024-12140
Elementor AI Addons – 70 Widgets, Premium Templates, Ultimate Elements <= 2.2.1 - Authenticated (Contributor+) Private Templates Content Disclosure
Medium
CVE-2024-12261
SmartEmailing.cz <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-12159
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords <= 3.1 - Information Exposure
High
CVE-2024-12313
Compare Products for WooCommerce <= 3.2.1 - Unauthenticated PHP Object Injection
High
CVE-2024-12157
Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.