Low
CVE-2024-48228
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2024-9501
Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider
High
CVE-2024-47821
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
Medium
CVE-2024-10117
WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode
High
CVE-2024-48230
SQL injection in funadmin
High
CVE-2024-48229
SQL injection in funadmin
High
CVE-2024-48227
Logic flaw in Funadmin
High
CVE-2024-48226
SQL injection in funadmin
High
CVE-2024-48225
SQL injection in funadmin
High
CVE-2024-48224
SQL injection in funadmin
High
CVE-2024-48218
SQL injection in funadmin
High
CVE-2024-48222
SQL injection in funadmin
High
CVE-2024-48223
SQL injection in funadmin
High
CVE-2024-9772
Uix Shortcodes – Compatible with Gutenberg <= 1.9.9 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-10357
Clever Addons for Elementor <= 2.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-9116
Monkee-Boy Essentials <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9853
ID-SK Toolkit <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9642
Editor Custom Color Palette <= 3.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-9637
School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation
Medium
CVE-2024-9967
WP show more <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_more Shortcode
Medium
CVE-2024-10092
Download Monitor <= 5.0.12 - Missing Authorization to API Key Manipulation
Medium
CVE-2024-9456
WP Awesome Login <= 0.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-8870
Forms for Mailchimp by Optin Cat – Grow Your MailChimp List <= 2.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-10091
ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.