Medium
CVE-2024-21535
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-49306
WP Content Copy Protection & No Right Click <= 3.5.9 - Cross-Site Request Forgery
Medium
CVE-2024-49320
Encyclopedia / Glossary / Wiki <= 1.7.60 - Reflected Cross-Site Scripting
High
CVE-2024-49317
Point Maker <= 0.1.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-49309
Digitally <= 1.0.8 - Reflected Cross-Site Scripting
Critical
CVE-2024-49314
JiangQie Free Mini Program <= 2.5.2 - Unauthenticated Arbitrary File Uplaod
Medium
CVE-2024-43300
Movie Database <= 1.0.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-49308
Animator <= 3.0.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-49321
Simple Custom Post Order <= 2.5.7 - Missing Authorization
High
CVE-2024-8507
File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-49298
PeproDev Ultimate Invoice <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49278
Omnipress <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49288
Email Template Customizer for WooCommerce <= 1.2.9.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Critical
CVE-2024-9105
UltimateAI <= 2.8.3 - Authentication Bypass
Medium
CVE-2024-9689
Post From Frontend <= 1.0.0 - Cross-Site Request Forgery to Arbitrary Post Deletion
Medium
CVE-2024-9888
ElementInvader Addons for Elementor <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49284
WP SendFox <= 1.3.1 - Unauthenticated Information Disclosure
Critical
CVE-2024-49287
PDF-Rechnungsverwaltung <= 0.0.1 - Unauthenticated Local File Inclusion
Medium
CVE-2024-49295
Simple Testimonials Showcase <= 1.1.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Critical
CVE-2024-9634
GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution
Critical
CVE-2024-49286
SSV Events <= 3.2.7 - Unauthenticated Local File Inclusion
Medium
CVE-2024-49277
UltraAddons Elementor Lite <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-49302
WordPress Portfolio Builder – Portfolio Gallery <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49593
Advanced Custom Fields <= 6.3.8 & Secure Custom Fields <= 6.3.6.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.