Medium
CVE-2024-23511
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-23513
PropertyHive <= 2.0.5 - Unauthenticated PHP Object Injection via propertyhive_currency
Medium
CVE-2024-0836
WordPress Review & Structure Data Schema Plugin – Review Schema <= 2.1.14 - Missing Authorization to Arbitrary Review Update
Medium
CVE-2023-7202
Fatal Error Notify <= 1.5.2 - Missing Authorization to Test Error Email Sending
Critical
CVE-2024-23512
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks <= 3.1.4 - PHP Object Injection via wopb_wishlist and wopb_compare
Medium
08b75cac-7b1d-4bed-a1b7-bd1e872f2b4f
Fatal Error Notify <= 1.5.2 - Cross-Site Request Forgery to Test Error Email Sending
Medium
CVE-2024-0678
Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-0697
Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversal
Medium
CVE-2024-0630
WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Source
Medium
CVE-2023-6985
10Web AI Assistant – AI content writing assistant <= 1.0.18 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2024-0668
Advanced Database Cleaner <= 3.1.3 - Authenticated(Administrator+) PHP Object Injection via process_bulk_action
Medium
CVE-2024-0624
Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders Update
High
CVE-2023-6933
Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection
Medium
CVE-2023-6843
easy.jobs <= 2.4.6 - Missing Authorization to Settings Update
Medium
CVE-2023-51415
GiveWP <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4637
WPvivid <= 0.9.94 - Missing Authorization
Critical
CVE-2024-22309
ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-0699
AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url
Medium
CVE-2024-22304
FreshMail For WordPress <= 2.3.2 - Cross-Site Request Forgery
Medium
CVE-2024-22162
WPZOOM Shortcodes <= 1.0.1 - Reflected Cross-Site Scripting
Critical
CVE-2023-6592
FastDup <= 2.1.9 - Sensitive Information Exposure via Directory Listing
Medium
CVE-2023-7014
Author Box, Guest Author and Co-Authors for Your Posts – Molongui <= 4.7.4 - Information Exposure via ma_debug
Critical
CVE-2024-22284
Asgaros Forum <= 2.7.2 - Unauthenticated PHP Object Injection in prepare_unread_status
High
CVE-2024-0428
Index Now <= 2.6.3 - Cross-Site Request Forgery via reset_form
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.