Medium
CVE-2024-56292
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2024-49688
ARPrice <= 4.1.3 - Unauthenticated PHP Object Injection
Critical
CVE-2024-56291
PlainInventory <= 3.1.6 - Unauthenticated PHP Object Injection
Critical
CVE-2024-56283
Locatoraid Store Locator <= 3.9.50 - Unauthenticated PHP Object Injection
Critical
CVE-2024-49222
WPGuppy <= 1.1.0 - Unauthenticated PHP Object Injection
Critical
CVE-2025-22311
Private Messages for UserPro <= 4.10.0 - Unauthenticated Local File Inclusion
High
CVE-2024-56281
워드프레스 결제 심플페이 <= 5.2.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-56276
Contact Form by WPForms <= 1.9.2.2 - Missing Authorization
Medium
CVE-2024-56294
Nexter Blocks <= 4.0.7 - Missing Authorization
Medium
CVE-2024-12195
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-10957
UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection
High
CVE-2024-56286
Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Editor+) Local File Inclusion
Medium
CVE-2025-22327
EO4WP <= 1.0.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12132
WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-56248
WPMasterToolKit <= 1.13.1 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2024-56246
Nexter Blocks <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24617
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 9.11.0 - Reflected Cross-Site Scripting
High
CVE-2025-24620
Best WordPress Shortcode Plugin in 2025 – AIO Shortcodes <= 1.3.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-12238
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2025-24608
GD Mail Queue <= 4.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-24602
WP24 Domain Check <= 1.10.14 - Reflected Cross-Site Scripting
High
CVE-2024-12272
WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-12636
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.2.7 - Cross-Site Request Forgery
Medium
CVE-2024-12032
Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.