High
CVE-2024-13869
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filters
High
CVE-2025-0521
Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-13555
1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Cross-Site Request Forgery to Backup Process Cancellation
Medium
CVE-2024-13609
1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php
Medium
CVE-2025-26779
Keep Backup Daily <= 2.1.0 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-13653
ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2024-13643
Zox News <= 3.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Modification
High
CVE-2024-12129
Royal Core <= 2.9.2 - Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2024-11936
Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2025-0215
UpdraftPlus - Backup/Restore <= 1.24.12 - Reflected Cross-Site Scripting
Medium
CVE-2025-22773
Htaccess File Editor <= 1.0.19 - Unauthenticated Information Exposure
Medium
CVE-2025-24651
WebToffee WP Backup and Migration <= 1.5.3 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-12330
WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposure
Medium
CVE-2025-22800
Post SMTP <= 2.9.11 - Missing Authorization via regenerate_qrcode()
High
CVE-2024-10932
Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'
High
CVE-2024-10957
UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection
Medium
CVE-2024-56273
WPvivid Backup and Migration <= 0.9.106 - Missing Authorization
Medium
CVE-2024-12850
Database Backup and check Tables Automated With Scheduler 2024 <= 2.32 - Authenticated (Admin+) Arbitrary File Read
High
CVE-2024-56067
WP SuperBackup <= 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download
High
CVE-2024-56068
WP SuperBackup <= 2.3.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-56070
WP SuperBackup <= 2.3.3 - Missing Authorization
Medium
CVE-2024-56069
WP SuperBackup <= 2.3.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-56064
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-9290
Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.