Low
CVE-2024-46209
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Low
CVE-2024-35498
Grav Cross-site Scripting vulnerability
Medium
CVE-2024-12699
Service Box <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-21617
Guzzle OAuth Subscriber has insufficient nonce entropy
Medium
CVE-2024-10866
Export Import Menus <= 1.9.1 - Missing Authorization to Unauthenticated Menu Export
Medium
CVE-2024-12495
Bootstrap Blocks for WP Editor v2 <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12781
Aurum - WordPress & WooCommerce Shopping Theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import
Medium
CVE-2024-9502
Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module
High
CVE-2024-12849
Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read
Medium
CVE-2024-12437
Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-12439
Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marketplace' Shortcode
Medium
CVE-2024-9697
Social Rocket – Social Sharing Plugin <= 1.3.4 - Missing Authorization to Settings Update
Medium
CVE-2024-9702
Social Rocket <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-12438
WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket <= 4.75 - Reflected Cross-Site Scripting
Medium
CVE-2024-11887
Geo Content <= 6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11756
SweepWidget Contests, Giveaways, Photo Contests, Competitions <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12535
Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure
Medium
CVE-2024-10536
FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor <= 6.0.0 - Missing Authorization to Authenticated (Subscriber+) Shortcode Export
Medium
CVE-2024-12464
Chatroll Live Chat <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12440
Candifly <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12384
Binary MLM Woocommerce <= 2.0 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2024-12383
Binary MLM Woocommerce <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12073
Meteor Slides <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-12470
School Management System – SakolaWP <= 1.0.8 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.