Medium
CVE-2024-3601
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2024-28890
Forminator <= 1.28.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-32558
eCommerce Product Catalog Plugin for WordPress <= 3.3.32 - Reflected Cross-Site Scripting
Medium
CVE-2024-3731
Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's'
Medium
CVE-2024-3598
ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id'
Critical
CVE-2024-3729
Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation
Medium
CVE-2024-31857
Forminator <= 1.15.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-2542
Jotform Online Forms <= 1.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-3560
LearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3312
Easy Custom Auto Excerpt <= 2.4.12 - Sensitive Information Exposure
High
CVE-2024-3813
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2023-7067
ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_store
Medium
CVE-2024-3582
UnGallery <= 2.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-3815
Newspaper <= 12.6.5 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
Medium
CVE-2024-3818
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block
Medium
CVE-2024-3615
Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's'
Medium
CVE-2024-3814
tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
Medium
CVE-2024-1958
WPB Show Core <= 2.6 - Reflected Cross-Site Scripting via 'file'
Medium
CVE-2024-3903
Add Custom CSS and JS <= 1.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2024-31077
Forminator <= 1.29.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-3590
LetterPress – Elevate Your WordPress Site's E-Mail Campaigns and Marketing <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-5971
Save as PDF Plugin by Pdfcrowd <= 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-3849
Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-2833
Jobs for WordPress <= 2.7.5 - Reflected Cross-Site Scripting via job-search
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.