Medium
CVE-2024-35636
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-35639
Simple Spoiler <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-35645
Random Banner <= 4.2.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-34385
YITH WooCommerce Wishlist <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-35643
WP Back Button <= 1.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-5522
HTML5 Video Player <= 2.5.26 - Unauthenticated SQL Injection
Medium
CVE-2024-35635
Ninja Tables – Easiest Data Table Builder <= 5.0.9 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2024-4205
Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure
Medium
CVE-2024-35642
Site Favicon <= 0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3583
Simple Like Page Plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4668
Gum Elementor Addon <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price Table and Post Slider Widgets
Medium
CVE-2024-2089
Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2657
Font Farsi <= 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4355
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 10.23 - Missing Authorization to Information Expsoure
Medium
CVE-2024-4426
Comparison Slider <= 1.0.5 - Cross-Site Request Forgery
Medium
CVE-2024-4427
Comparison Slider <= 1.0.5 - Missing Authorization
Medium
CVE-2024-4422
Comparison Slider <= 1.0.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-5073
Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed
Medium
CVE-2024-5341
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget
Medium
CVE-2024-3943
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment
Medium
CVE-2024-3945
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()
Medium
CVE-2024-3947
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings
Medium
CVE-2024-3946
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings
Medium
CVE-2024-4218
AffiEasy <= 1.1.6 - Cross-Site Request Forgery to Various Actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.