Medium
CVE-2024-10693
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-10352
Magical Addons For Elementor <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
Medium
CVE-2024-51837
WP Contest <= 1.0.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-51882
Gboy Custom Google Map <= 1.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-51845
Share Buttons – Social Media <= 1.0.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-10669
Countdown Timer block – Display the event's date into a timer. <= 1.2.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10770
Envo Extra <= 1.9.3 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10084
Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode
Critical
CVE-2024-10687
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injection
Medium
CVE-2024-10329
Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-10319
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
Medium
CVE-2024-51672
BetterLinks <= 2.1.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-10540
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-51608
AmaDiscount <= 1.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-51579
5 Stars Rating Funnel <= 1.4.01 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-10098
ApplyOnline <= 2.6.2 - Unauthenticated Application Disclosure
Medium
CVE-2024-51620
Porsline <= 1.0.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-51606
Blrt WP Embed <= 1.6.9 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-51621
Download-Mirror-Counter <= 1.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-6479
SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-9828
Taskbuilder – WordPress Project & Task Management plugin <= 3.0.4 - Authenticated (Admin+) SQL injection
Medium
CVE-2024-50544
RSVP ME <= 1.9.9 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-50539
Lodgix.com Vacation Rental Website Builder <= 3.9.73 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-51623
WP EIS <= 1.3.3 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.