High
CVE-2024-10855
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2024-10899
WooCommerce Product Table Lite <= 3.8.6 - Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting
Medium
CVE-2024-11154
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-52487
Ultimate Classified Listings <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-9239
Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-11179
MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-8726
MailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-52484
Wc Recently viewed products <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-10900
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion
Medium
CVE-2024-52486
Elementor Portfolio Builder <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-52477
Document & Data Automation <= 1.6.1 - Cross-Site Request Forgery
Medium
CVE-2024-10872
Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-52474
Express Payments Module <= 1.1.8 - Unauthenticated SQL Injection via type_id
Medium
CVE-2024-52478
Jobify - Job Board WordPress Theme < 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10708
System Dashboard <= 2.8.14 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2024-52483
LeanPress <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-10520
WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion
Medium
CVE-2024-10891
Save as PDF Plugin by Pdfcrowd <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11277
404 Solution <= 2.35.19 - Reflected Cross-Site Scripting
High
CVE-2024-11107
System Dashboard <= 2.8.14 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-52482
Ortto <= 1.0.19 - Reflected Cross-Site Scripting
High
CVE-2024-10913
Clone <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace'
Medium
CVE-2024-51900
What Would Seth Godin Do <= 2.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-9653
Restaurant Menu – Food Ordering System – Table Reservation <= 2.4.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.