Medium
CVE-2024-11294
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2024-11356
Tour Master - Tour Booking, Travel, Hotel < 5.3.4 - Unauthenticated Stored Cross-Site Scripting via Room Booking
Medium
CVE-2024-56016
Image Mapper <= 0.2.5.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-24577
Poll Maker <= 5.5.0 - Missing Authorization
Medium
CVE-2024-56010
Device Detector <= 4.2.0 - Reflected Cross-Site Scripting via id
Medium
CVE-2024-55998
Popup Surveys & Polls for WordPress (Mare.io) <= 1.36 - Missing Authorization
High
CVE-2024-55987
Advanced What should we write next about <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-55992
WooCommerce Basic Ordernumbers <= 1.4.4 - Missing Authorization
High
CVE-2024-55989
WP Simple Pay Lite Manager <= 1.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-56001
Ksher <= 1.1.1 - Missing Authorization
Critical
CVE-2024-55978
Code Generator Pro <= 1.2 - Unauthenticated SQL Injection
Medium
CVE-2024-55994
畅言评论系统 <= 2.0.5 - Missing Authorization
Medium
CVE-2024-55985
YDS Support Ticket System <= 1.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-56004
Easy Site Importer <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Medium
CVE-2024-56003
Caldera SMTP Mailer <= 1.0.1 - Missing Authorization
High
CVE-2024-55980
Wr Age Verification <= 2.0.0 - Unauthenticated SQL Injection
High
CVE-2024-56012
Flash News / Post (Responsive) <= 4.1 - Cross-Site Request Forgery to Privilege Escalation
High
CVE-2024-55984
Saksh Escrow System <= 2.4 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-55974
Mimoos <= 1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-55996
Dreamfox Media Payment gateway per Product for Woocommerce <= 3.5.8 - Missing Authorization
High
CVE-2024-56013
Wovax IDX <= 1.2.2 - Missing Authorization to Privilege Escalation
Critical
CVE-2024-55988
Navayan CSV Export <= 1.0.9 - Unauthenticated SQL Injection
Medium
CVE-2024-55999
XML Multilanguage Sitemap Generator <= 2.0.6 - Missing Authorization
Medium
CVE-2024-55979
Wr Age Verification <= 2.0.0 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.