Medium
CVE-2024-5713
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2024-5080
Wp EMember <= 10.6.5 - Authenticated (Admin+) Arbitrary File Upload
Critical
CVE-2024-5450
Bug Library <= 2.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-3751
Seriously Simple Podcasting <= 3.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5283
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Lead Editing
Medium
CVE-2024-3919
OpenPGP Form Encryption for WordPress <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5644
WordPress Plugin Tournamatch < 4.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3026
WordPress Button Plugin MaxButtons <= 9.7.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-5151
SULly <= 4.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5280
WP Affiliate Platform <= 6.5.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-5002
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20240319 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5442
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Gallery
High
CVE-2024-3593
UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2024-4874
Bricks Builder <= 1.9.8 - Insecure Direct Object Reference
Medium
CVE-2024-5966
Grey Opaque <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Download-Button Shortcode
Medium
CVE-2024-5965
Mosaic <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Medium
CVE-2024-5346
Flatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Medium
CVE-2024-4313
Table Addons for Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter
High
CVE-2024-5791
Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-6120
Sparkle Demo Importer <= 1.4.7 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import
Medium
CVE-2024-2870
Swift Framework < 2024.04.30 - Reflected Cross-Site Scripting
Critical
CVE-2024-37228
InstaWP Connect <= 0.1.0.38 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-37241
WP Job Manager - Resume Manager <= 2.1.0 - Cross-Site Request Forgery
Medium
CVE-2024-5626
Inline Related Posts <= 3.6.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.