High
CVE-2024-38795
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-39624
ListingPro <= 2.9.4 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2024-6724
Generate Images – Magic Post Thumbnail <= 5.2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-39629
Himalayas <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-38794
Custom Query Blocks <= 5.2.0 - Missing Authorization via REST Routes
Critical
CVE-2024-39619
ListingPro Plugin <= 2.9.4 - Unauthenticated Local File Inclusion
Medium
CVE-2024-38792
Language Translate Widget for WordPress – ConveyThis <= 234 - Missing Authorization to Limited Option Update
Medium
CVE-2024-39627
NextGEN Gallery <= 3.59.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-38789
Telegram Bot & Channel <= 3.8.2 - Cross-Site Request Forgery
Medium
CVE-2024-38790
Smartsupp – live chat, chatbots, AI and lead generation <= 3.6 - Cross-Site Request Forgery
Medium
CVE-2024-1845
VikRentCar Car Rental Management System <= 1.3.1 - Cross-Site Request Forgery
Medium
CVE-2024-6848
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload
High
CVE-2024-6497
SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter
Medium
CVE-2024-6491
Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update
Medium
CVE-2024-3934
Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2024-6489
Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update
Medium
CVE-2024-6136
WP eStore <= 8.5.5 - Cross-Site Request Forgery to Settings Reset
High
CVE-2024-38775
CTX Feed <= 6.5.6 - Authenticated (Shop Manager+) Arbitrary Options Update
Critical
CVE-2024-38788
UiPress lite <= 3.4.06 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-38782
Leaflet Maps Marker <= 3.12.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-38773
FormLift for Infusionsoft Web Forms <= 7.5.17 - Unauthenticated SQL Injection
Medium
CVE-2024-6560
Addonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure
Medium
CVE-2024-38781
CopySafe Web Protection <= 3.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-38786
CoziPress <= 1.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.