High
CVE-2024-39338
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2024-38989
Prototype pollution in izatop bunt
Critical
CVE-2024-7094
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution
Medium
CVE-2024-43269
Backup and Restore Wordpress <= 1.50 - Cross-Site Request Forgery to Backup Trigger
Medium
CVE-2024-43251
Bit Form Pro <= 2.6.4 - Authenticated (Subscriber+) Sensitive Information Exposure
High
CVE-2024-43271
Woo Products Widgets For Elementor <= 2.0.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43260
Clearfy Cache <= 2.2.4 - Missing Authorization
High
CVE-2024-43252
Crew HRM <= 1.1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-7692
Flaming Forms <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-43239
Masteriyo - LMS <= 1.11.4 - Authenticated (Student+) Insecure Direct Object Reference
Medium
CVE-2024-7388
WP Bannerize Pro <= 1.9.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43241
Indeed Membership Pro <= 12.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-43255
MyBookTable Bookstore <= 3.4.0 - Cross-Site Request Forgery
Medium
CVE-2024-43267
Mega Addons For Elementor <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-7690
DN Popup <= 1.2.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-43272
Icegram <= 3.1.24 - Missing Authorization
Medium
CVE-2024-43270
Backup and Restore WordPress <= 1.50 - Missing Authorization
Medium
CVE-2024-43264
Create by Mediavine <= 1.9.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-43238
weMail <= 1.14.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-43273
Icegram Collect – Easy Form, Lead Collection and Subscription plugin <= 1.3.14 - Missing Authorization
Medium
CVE-2024-43247
WHMpress <= 6.2-revision-5 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Critical
CVE-2024-43248
Bit Form Pro <= 2.6.4 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-43263
Visual Composer Starter <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-43245
JobSearch <= 2.3.4 - Authentication Bypass to Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.