High
CVE-2024-10728
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-8961
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10825
Hide My WP Ghost – Security & Firewall <= 5.3.01 - Reflected Cross-Site Scripting via URL
High
CVE-2024-49362
Remote Code Execution on click of <a> Link in markdown preview
Medium
CVE-2024-10582
Music Player for Elementor – Audio Player & Podcast Player <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import
Medium
CVE-2024-10113
WP AdCenter – Ad Manager & Adsense Ads <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter_ad Shortcode
Medium
CVE-2024-9356
Yotpo: Product & Photo Reviews for WooCommerce <= 1.7.9 - Reflected Cross-Site Scripting
High
CVE-2024-10260
Tripetto <= 8.0.11 - Unauthentiated Stored Cross-Site Scripting via Form File Upload
High
CVE-2024-10793
WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter
Medium
CVE-2024-10897
Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation
Medium
CVE-2024-9609
LearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-10893
WP Booking Calendar <= 10.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9765
EKC Tournament Manager <= 2.2.1 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-10311
External Database Based Actions <= 0.1 - Authenticated (Subscriber+) Authentication Bypass
Medium
CVE-2024-8978
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-10704
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.30 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-24534
DPortfolio <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24541
DK White Label <= 1.0 - Reflected Cross-Site Scripting
Critical
CVE-2024-10924
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Medium
CVE-2024-10980
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Cookie Consent'
Medium
CVE-2024-51899
Simple Pricing Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9709
EKC Tournament Manager <= 2.2.1 - Cross-Site Request Forgery to Tournament and Team Creation
High
CVE-2024-8979
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
Medium
CVE-2024-9458
Reservit Hotel <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.