Medium
CVE-2024-8444
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2024-48029
SB Random Posts Widget <= 1.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-48038
wp-Monalisa <= 6.4 - Cross-Site Request Forgery
High
CVE-2024-9022
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter
Critical
CVE-2024-48030
Telecash Ricaricaweb <= 2.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-48026
Disc Golf Manager <= 1.0.0 - Unauthenticated PHP Object Injection
High
CVE-2024-9575
pretix widget <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-48037
Contact Form Widget <= 1.4.2 - Cross-Site Request Forgery
Medium
CVE-2024-48032
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9685
Notification for Telegram <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Send Telegram Test Message
Critical
CVE-2024-48033
Talkback <= 1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-48024
Keep Backup Daily <= 2.0.8 - Unauthenticated Information Disclosure
Medium
CVE-2024-48036
SKT Blocks <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-48040
Tainacan <= 0.21.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-9377
Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting
High
CVE-2024-48034
Creates 3D Flipbook, PDF Flipbook <= 1.2 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-9522
WP Users Masquerade <= 2.0.0 - Authenticated (Subscriber+) Authentication Bypass
Medium
CVE-2024-8759
Nested Pages <= 3.2.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-48039
CubeWP – All-in-One Dynamic Content Framework <= 1.1.15 - Missing Authorization
Critical
CVE-2024-9518
UserPlus <= 2.0 - Unauthenticated Privilege Escalation
Critical
CVE-2024-48028
IP Loc8 <= 1.1 - Unauthenticated PHP Object Injection
High
CVE-2024-48027
External featured image from bing <= 1.0.2 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2024-48041
CM Tooltip Glossary <= 4.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8513
QA Analytics <= 4.1.1.1 - Missing Authorization to Unauthenticated Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.