High
CVE-2024-56049
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
9f5cdb47-205a-4c03-a8a9-f39d1b4fc769
Agency Toolkit <= 1.0.23 - Missing Authorization to Unauthenticated Arbitrary Options Update
Medium
CVE-2024-56026
Simple Proxy <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56025
AdWork Media EZ Content Locker <= 3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56033
FAQs <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-56034
Services updates for customers <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56028
Lemonade Social Networks Autoposter Pinterest <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56020
SvegliaT Buttons <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12259
CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation
Medium
CVE-2024-56018
BU Section Editing <= 0.9.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-56031
Smart Shopify Product <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2024-56019
Inline Footnotes <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8855
WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) SQL Injection
High
CVE-2024-56048
WPLMS <= 1.9.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Critical
CVE-2024-56059
Partners <= 0.2.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-11748
Taeggie Feed <= 0.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-56055
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary Directory Deletion
High
CVE-2024-56050
WPLMS < 1.9.9.5.3 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-56027
Leads CRM <= 2.0.13 - Reflected Cross-Site Scripting
Medium
CVE-2024-56035
Upload Scanner <= 1.2 - Reflected Cross-Site Scripting
Critical
CVE-2024-56040
VibeBP <= 1.9.9.4.1 - Unauthenticated Privilege Escalation
Medium
CVE-2025-24576
Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.7 - Reflected Cross-Site Scripting
High
CVE-2024-56051
WPLMS < 1.9.9.5 - Authenticated (Student+) Remote Code Execution
Medium
CVE-2024-56037
User Referral <= 8.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.