Medium
CVE-2024-2405
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-2137
All-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets
Medium
CVE-2024-32105
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Cross-Site Request Forgery
Medium
CVE-2024-32083
Easy Logo <= 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-32109
WP Matterport Shortcode <= 2.1.9 - Cross-Site Request Forgery
Medium
CVE-2024-32095
MultiParcels Shipping For WooCommerce < 1.16.9 - Cross-Site Request Forgery
Medium
CVE-2024-32108
Convert Post Types <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2024-32093
Novelist <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2024-31435
Inisev Analyst Module <= Various Versions - Missing Authorization
Medium
CVE-2024-31423
WP Accessibility Helper (WAH) <= 0.6.2.5 - Missing Authorization
Medium
CVE-2024-31376
Dashboard To-Do List <= 1.3.1 - Cross-Site Request Forgery via ardtdw_widgetupdate()
Medium
CVE-2024-31931
Save as Image <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31943
USPS Shipping for WooCommerce – Live Rates <= 1.9.2 - Cross-Site Request Forgery
Medium
CVE-2024-31922
WordPress Hosting Benchmark tool <= 1.3.6 - Cross-Site Request Forgery via execute_plugin()
Medium
CVE-2024-31389
MihanPanel <= 12.4 - Cross-Site Request Forgery
Medium
CVE-2024-31425
Amelia <= 1.0.95 - Cross-Site Request Forgery
Medium
CVE-2024-3344
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Author+) Limited File Upload to Stored Cross-Site Scripting
Medium
CVE-2024-31933
Page Builder: Live Composer <= 1.5.35 - Cross-Site Request Forgery
Medium
CVE-2024-31426
Inline Related Posts <= 3.3.1 - Cross-Site Request Forgery
Medium
CVE-2024-31929
Intagrate Lite <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31388
Table & Contact Form 7 Database – Tablesome <= 1.0.25 - Cross-Site Request Forgery
Medium
CVE-2024-31930
Save as PDF <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31427
Marker.io <= 1.1.8 - Cross-Site Request Forgery
Medium
CVE-2024-31923
Feather Login Page <= 1.1.5 - Cross-Site Request Forgery via saveData()
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.