Medium
CVE-2024-3554
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-33912
Academy LMS <= 1.9.16 - Missing Authorization
Medium
CVE-2024-3206
Different Menu in Different Pages – Control Menu Visibility (All in One) <= 2.3.2 - Missing Authorization to Menu Duplication
Medium
CVE-2024-33923
SP Project & Document Manager <= 4.69 - Missing Authorization
Medium
CVE-2024-0847
5280 Bootstrap Modal Contact Form <= 1.0 - Cross-Site Request Forgery to Bulk Delete Messages
Medium
CVE-2024-3717
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure
Medium
CVE-2024-4083
Easy Restaurant Table Booking <= 1.0.0 - Cross-Site Request Forgery
High
CVE-2024-1896
Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode
Medium
CVE-2024-3074
Elementor ImageBox <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33921
ReviewX <= 1.6.21 - Missing Authorization
High
CVE-2024-2831
Calendar <= 1.3.14 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-33929
Directorist <= 7.8.6 - Missing Authorization
Medium
CVE-2024-3023
AnnounceKit <= 2.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-33932
Login Logout Register Menu <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3368
All in One SEO <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-34423
Survey Maker – Best WordPress Survey Plugin <= 3.6.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-35764
Survey Maker <= 4.0.9 - IP Address Spoofing
Medium
CVE-2024-33677
Contact Form 7 Extension For Mailchimp <= 0.5.73 - Cross-Site Request Forgery
Medium
CVE-2024-3553
Tutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update
Medium
CVE-2024-33688
Teluro <= 1.0.31 - Cross-Site Request Forgery
Medium
CVE-2024-33692
Smart Recent Posts Widget <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-30241
ProfileGrid <= 5.7.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-2744
Nextgen Gallery <= 3.59 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3309
Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.