Critical
CVE-2024-48026
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-9575
pretix widget <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-48037
Contact Form Widget <= 1.4.2 - Cross-Site Request Forgery
Medium
CVE-2024-48032
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9685
Notification for Telegram <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Send Telegram Test Message
Critical
CVE-2024-48033
Talkback <= 1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-48024
Keep Backup Daily <= 2.0.8 - Unauthenticated Information Disclosure
Medium
CVE-2024-48036
SKT Blocks <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-48040
Tainacan <= 0.21.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-9377
Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting
High
CVE-2024-48034
Creates 3D Flipbook, PDF Flipbook <= 1.2 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-9522
WP Users Masquerade <= 2.0.0 - Authenticated (Subscriber+) Authentication Bypass
Medium
CVE-2024-8759
Nested Pages <= 3.2.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-48039
CubeWP – All-in-One Dynamic Content Framework <= 1.1.15 - Missing Authorization
Critical
CVE-2024-9518
UserPlus <= 2.0 - Unauthenticated Privilege Escalation
Critical
CVE-2024-48028
IP Loc8 <= 1.1 - Unauthenticated PHP Object Injection
High
CVE-2024-48027
External featured image from bing <= 1.0.2 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2024-48041
CM Tooltip Glossary <= 4.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8513
QA Analytics <= 4.1.1.1 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2024-9519
UserPlus <= 2.0 - Authenticated (Editor+) Registration Form Update to Privilege Escalation
High
CVE-2024-48035
ACF Images Search And Insert <= 1.1.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-48031
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Cross-Site Request Forgery
Medium
CVE-2024-48025
Simple Baseball Scoreboard <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9451
Embed PDF Viewer <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via height and width Parameters
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.