Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Unknown — Vulnerabilities & Security Advisories 4138

Browse all 4138 CVE security advisories affecting Unknown. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by Unknown:Contest GalleryDownload ManagerTutor LMS – eLearning and online course solutionEventONModern Events Calendar Litewp-eMemberAI ChatBotElementor Website BuilderNinja Forms Contact Form – The Drag and Drop Form Builder for WordPressWelcart e-CommerceLogo SliderForm Maker by 10WebBooster for WooCommerceYi Technologywp-cart-for-digital-productswp-affiliate-platformPhoto Gallery by 10WebMapPress Maps for WordPressEventPrimePopup boxWPQA BuilderWP MultiTaskingPhoto Gallery by 10Web – Mobile-Friendly Image GallerySalon booking systemSimple Download MonitorAutoptimizeVikBooking Hotel Booking Engine & PMSLearnPressNewsletter PopupNinja Forms
CVE IDTitleCVSSSeverityPublished
CVE-2024-6330 GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI — GEO my WP 9.8AICriticalAI2024-08-19
CVE-2024-6459 News Element Elementor Blog Magazine < 1.0.6 - Unauthenticated LFI — News Element Elementor Blog Magazine 9.8AICriticalAI2024-08-17
CVE-2024-6460 Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI — Grow by Tradedoubler 8.8AIHighAI2024-08-16
CVE-2024-6724 Generate Images – Magic Post Thumbnail < 5.2.8 - Admin+ Stored XSS — Generate Images 4.8AIMediumAI2024-08-13
CVE-2024-6134 WP eStore < 8.5.6 - Reflected XSS in Product Editing — wp-cart-for-digital-products 6.1AIMediumAI2024-08-10
CVE-2024-6158 Category Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS — Category Posts Widget 4.8AIMediumAI2024-08-09
CVE-2024-6136 WP eStore < 8.5.6 - Settings Reset via CSRF — wp-cart-for-digital-products 8.1AIHighAI2024-08-09
CVE-2024-6133 WP eStore < 8.5.6 - Reflected XSS in Customer Search — wp-cart-for-digital-products 6.1AIMediumAI2024-08-09
CVE-2024-6884 Gutenberg Blocks with AI by Kadence WP < 3.2.39 - Contributor+ Stored XSS — Gutenberg Blocks with AI by Kadence WP 5.4AIMediumAI2024-08-08
CVE-2024-6481 Search Filter Pro < 2.5.18 - Admin+ Stored XSS — Search & Filter Pro 4.8AIMediumAI2024-08-08
CVE-2024-6494 WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS — WordPress File Upload 6.1AIMediumAI2024-08-07
CVE-2024-3973 House Manager <= 1.0.8.4 - Reflected XSS — House Manager 6.1AIMediumAI2024-08-07
CVE-2024-6720 Light Poll <= 1.0.0 - Poll Answers Deletion via CSRF — Light Poll 8.1AIHighAI2024-08-06
CVE-2024-7084 Ajax Search Lite < 4.12.1 - Admin+ Stored XSS — Ajax Search Lite 5.4AIMediumAI2024-08-06
CVE-2024-6766 Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS — shortcodes-ultimate-pro 5.4AIMediumAI2024-08-06
CVE-2024-7082 easy-table-of-contents < 2.0.68 - Editor+ Stored XSS — Easy Table of Contents 5.4AIMediumAI2024-08-06
CVE-2024-6651 WordPress File Upload < 4.24.8 - Reflected XSS — WordPress File Upload 6.1AIMediumAI2024-08-06
CVE-2024-6498 CollectChat < 2.4.4 - Admin+ XSS — Chatbot for WordPress by Collect.chat ⚡️ 4.8AIMediumAI2024-08-05
CVE-2024-6710 Ditty < 3.1.45 - Author+ Stored XSS — Ditty 5.4AIMediumAI2024-08-05
CVE-2024-6270 Community Events < 1.5.1 - Admin+ Stored XSS — Community Events 4.8AIMediumAI2024-08-05
CVE-2024-5081 WP eMember <= v10.7.0 - Stored XSS via CSRF — wp-eMember 6.1AIMediumAI2024-08-05
CVE-2024-3636 Pinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSS — Pinpoint Booking System 4.8AIMediumAI2024-08-05
CVE-2024-2232 Himer - Social Questions and Answers < 2.1.3 - CSRF While Sending the Invites — Himer 4.3AIMediumAI2024-08-05
CVE-2024-6477 UsersWP < 1.2.12 - Users Information Disclosure — UsersWP 5.3AIMediumAI2024-08-03
CVE-2024-6390 Quiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSS — Quiz and Survey Master (QSM) 4.8AIMediumAI2024-08-03
CVE-2024-5595 Essential Blocks < 4.7.0 - Contributor+ Stored XSS — Essential Blocks 5.4AIMediumAI2024-08-02
CVE-2024-6529 Ultimate Classified Listings < 1.4 - Reflected XSS — Ultimate Classified Listings 6.1AIMediumAI2024-08-01
CVE-2024-6496 Light Poll <= 1.0.0 - Polls Deletion via CSRF — Light Poll 4.3AIMediumAI2024-08-01
CVE-2024-2872 Swift Framework < 2024.04.30 - Contributor+ Stored XSS — socialdriver-framework 4.8AIMediumAI2024-08-01
CVE-2024-3983 WooCommerce Customers Manager < 30.1 - Bulk Action via CSRF — WooCommerce Customers Manager 4.3AIMediumAI2024-08-01

This page lists every published CVE security advisory associated with Unknown. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.