High
CVE-2024-13534
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-13854
Education Addon for Elementor <= 1.3.1 - Authenticated (Contributor+) Insecure Direct Object Reference via naedu_elementor_template Shortcode
Medium
CVE-2024-13676
Categorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-13533
Small Package Quotes – USPS Edition <= 1.3.5 - Unauthenticated SQL Injection
High
CVE-2024-13483
LTL Freight Quotes – SAIA Edition <= 2.2.10 - Unauthenticated SQL Injection
High
CVE-2024-13491
Small Package Quotes – For Customers of FedEx <= 4.3.1 - Unauthenticated SQL Injection
High
CVE-2024-13481
LTL Freight Quotes – R+L Carriers Edition <= 3.3.4 - Unauthenticated SQL Injection
High
CVE-2024-13485
LTL Freight Quotes – ABF Freight Edition <= 3.3.7 - Unauthenticated SQL Injection
High
CVE-2024-13489
LTL Freight Quotes – Old Dominion Edition <= 4.2.10 - Unauthenticated SQL Injection
Medium
CVE-2024-13712
Pollin <= 1.01.1 - Authenticated (Admin+) SQL Injection
High
CVE-2024-13478
LTL Freight Quotes – TForce Edition <= 3.6.4 - Unauthenticated SQL Injection
Medium
CVE-2024-13369
Tour Master - Tour Booking, Travel, Hotel <= 5.3.7 - Authenticated (Subscriber+) SQL Injection via review_id Parameter
Medium
CVE-2024-13595
Simple Signup Form <= 1.6.5 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-13622
File Uploads Addon for WooCommerce <= 1.7.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2024-13609
1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php
Medium
CVE-2025-1363
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-2248
WP-PManager <= 1.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-23536
Track Page Scroll <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-1362
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Cross-Site Request Forgery
Medium
CVE-2024-13500
WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter
Medium
CVE-2024-13752
WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Medium
CVE-2024-13525
Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
Critical
CVE-2024-13513
Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation
Medium
CVE-2025-26773
Analytify <= 5.5.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.