Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.
40,549 vulnerabilities found (page 1605 of 1622)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| CVE-2024-47373 | < 6.5.1 |
LOW | N/A | LiteSpeed Cache < 6.5.1 - Contributor+ Stored XSS | — | wpscan |
| CVE-2024-47366 | < 1.13.7 |
LOW | N/A | Elementor Addon Elements < 1.13.7 - Authenticated (Contributor+) Stored Cross-Site Scripting | — | wpscan |
| CVE-2024-47361 | < 1.13.7 |
LOW | N/A | Elementor Addon Elements < 1.13.7 - Missing Authorization | — | wpscan |
| CVE-2024-4704 | < 5.9.5 |
LOW | N/A | Contact Form 7 < 5.9.5 - Unauthenticated Open Redirect | — | wpscan |
| CVE-2024-4670 | < 3.7.0 |
LOW | N/A | All-in-One Video Gallery < 3.7.0 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode | — | wpscan |
| CVE-2024-4627 | < 1.0.219 |
LOW | N/A | Rank Math SEO < 1.0.219 - Authenticated Stored XSS | — | wpscan |
| CVE-2024-4624 | < 5.9.21 |
LOW | N/A | Essential Addons for Elementor < 5.9.21 - Contributor+ Stored Cross-Site Scripting | — | wpscan |
| CVE-2024-4619 | < 3.21.6 |
LOW | N/A | Elementor Website Builder < 3.21.6 - Contributor+ DOM Stored XSS | — | wpscan |
| CVE-2024-4617 | < 1.0.219-beta |
LOW | N/A | Rank Math SEO with AI Best SEO Tools < 1.0.219-beta - Authenticated (Contributor+) Stored Cross-Site Scripting | — | wpscan |
| CVE-2024-4570 | < 1.13.6 |
LOW | N/A | Elementor Addon Elements < 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting | — | wpscan |
| CVE-2024-4569 | < 1.13.6 |
LOW | N/A | Elementor Addon Elements < 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting | — | wpscan |
| CVE-2024-4565 | < 6.3 |
LOW | N/A | Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access | — | wpscan |
| CVE-2024-4449 | < 5.9.20 |
LOW | N/A | Essential Addons for Elementor < 5.9.20 - Contributor+ DOM-Based Stored Cross-Site Scripting via Several Widgets | — | wpscan |
| CVE-2024-4448 | < 5.9.20 |
LOW | N/A | Essential Addons for Elementor β Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.20 - Contributor… | — | wpscan |
| CVE-2024-4401 | < 1.13.6 |
LOW | N/A | Elementor Addon Elements < 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_anima… | — | wpscan |
| CVE-2024-44000 | < 6.5.0.1 |
LOW | N/A | LiteSpeed Cache < 6.5.0.1 - Unauthenticated Sensitive Information Exposure via Log Files | — | wpscan |
| CVE-2024-43999 | < 3.8.12 |
LOW | N/A | Ninja Forms < 3.8.12 - Administrator+ Stored Cross-Site Scripting | — | wpscan |
| CVE-2024-4392 | < 13.4 |
LOW | N/A | Jetpack < 13.4 - Contributor+ Stored Cross-Site Scripting via wpvideo Shortcode | — | wpscan |
| CVE-2024-4383 | < 4.4.6 |
LOW | N/A | Simple Membership < 4.4.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode | — | wpscan |
| CVE-2024-4335 | < 1.0.218 |
LOW | N/A | Rank Math SEO with AI Best SEO Tools < 1.0.218 - Authenticated (Contributor+) Stored Cross-Site Scripting | — | wpscan |
| CVE-2024-43282 | < 2.7.3 |
LOW | N/A | Tutor LMS < 2.7.3 - Authenticated (Administrator+) SQL Injection | — | wpscan |
| CVE-2024-43231 | < 2.7.4 |
LOW | N/A | Tutor LMS < 2.7.4 - Authenticated (Instructor+) Stored Cross-Site Scripting | — | wpscan |
| CVE-2024-4318 | < 2.7.1 |
LOW | N/A | Tutor LMS < 2.7.1 - Authenticated (Instructor+) SQL Injection | — | wpscan |
| CVE-2024-43142 | < 2.7.4 |
LOW | N/A | Tutor LMS < 2.7.4 - Missing Authorization | — | wpscan |
| CVE-2024-43119 | < 2.0.13 |
LOW | N/A | Aruba HiSpeed Cache < 2.0.13 - Missing Authorization | — | wpscan |
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →