High
CVE-2024-52385
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2025-24548
Autoglot <= 2.4.7 - Reflected Cross-Site Scripting
Critical
CVE-2024-52375
Datasets Manager by Arttia Creative <= 1.5 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-52381
ZIJ KART <= 1.1 - Unauthenticated Local File Inclusion
Critical
CVE-2024-52374
Do That Task <= 1.5.5 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-52372
Easy CSV Importer BETA <= 7.0.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-52389
WP Job Portal <= 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-52386
Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-52377
Instant Image Generator <= 1.5.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-52380
Picsmize <= 1.0.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-52390
CYAN Backup <= 2.5.3 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-52393
Podlove Podcast Publisher <= 4.1.15 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2024-52383
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.1.2 - Missing Authorization
Critical
CVE-2024-52379
kineticPay for WooCommerce <= 2.0.8 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-10695
Futurio Extra <= 2.0.13 - Authenticated (Contributor+) Post Disclosure
Critical
CVE-2024-10245
Relais 2FA <= 1.0 - Authentication Bypass
Medium
CVE-2024-52392
W3SPEEDSTER <= 7.25 - Cross-Site Request Forgery
High
CVE-2024-52384
Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-52395
Floating Buttons for WooCommerce <= 2.8.8 - Missing Authorization
Critical
CVE-2024-52376
Boat Rental Plugin for WordPress <= 1.0.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-9357
xili-tidy-tags <= 1.12.04 - Reflected Cross-Site Scripting
Critical
CVE-2024-52371
Global Gateway e4 | Payeezy Gateway | <= 2.0 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2024-52373
Devexhub Gallery <= 2.0.1 - Unauthenticated Arbitrary File Upload
Low
CVE-2024-52396
WOLF <= 1.0.8.3 - Authenticated (Editor+) CSV Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.