High
CVE-2024-6021
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-3986
SportsPress – Sports Club & League Manager <= 2.7.21 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-37921
Chained Quiz <= 1.3.2.8 - Missing Authorization
High
CVE-2024-37560
WP User Switch <= 1.1.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-37918
ConeBlog – WordPress Blog Widgets <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5809
WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-37924
WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Unauthenticated Information Exposure
Medium
CVE-2024-6230
Pardakht Delkhah <= 2.9.8 - Cross-Site Request Forgery to Form Setting Reset
Medium
CVE-2024-5808
WP Ajax Contact Form <= 2.2.2 - Cross-Site Request Forgery to Arbitrary Email Deletion
Critical
CVE-2024-5765
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Unauthenticated SQL Injection
Critical
CVE-2024-37928
Jobmonster < 4.7.5 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-3113
FormFlow <= 2.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1287
Paid Memberships Pro - Member Directory Add On < 1.2.6 - Authenticated (Contributor+) Information Exposure
Critical
CVE-2024-37933
Woocommerce OpenPos <= 6.4.4 - Unauthenticated SQL Injection
Medium
CVE-2024-37923
Cliengo – Chatbot <= 3.0.4 - Cross-Site Request Forgery
Medium
CVE-2024-37561
Plugin Notes Plus <= 1.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-37927
Jobmonster <= 4.7.5 - Unauthenticated Privilege Escalation
Medium
CVE-2024-37919
Timeline Module for Beaver Builder <= 1.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-37939
Patricia Lite <= 1.2.3 - Cross-Site Request Forgery
High
CVE-2024-37563
TOCHAT.BE <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-6224
Send email only on Reply to My Comment <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-37936
Tabs For WPBakery Page Builder <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6813
Login by Auth0 <= 4.6.0 - Reflected Cross-Site Scripting via wle
Medium
CVE-2024-6391
oik <= 4.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via bw_button Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.