Medium
CVE-2024-31121
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-30536
Slugs Manager <= 2.6.7 - Cross-Site Request Forgery
Medium
CVE-2024-30528
Spiffy Calendar <= 4.9.10 - Missing Authorization
Medium
CVE-2024-2492
PowerPack Addons for Elementor <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widget
Medium
CVE-2024-30542
WholesaleX <= 1.3.2 - Unauthenticated Privilege Escalation
Medium
CVE-2024-1692
BoldGrid Easy SEO – Simple and Effective SEO <= 1.6.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Description
Medium
CVE-2024-31100
Popup Cart Lite for WooCommerce <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2024-31122
User Rights Access Manager <= 1.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-47153
Jobeleon Theme <= 1.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-30466
WooCommerce Multilingual & Multicurrency <= 5.3.4 - Missing Authorization
Medium
CVE-2024-2729
Otter Blocks <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30437
Webinar and Video Conference with Jitsi Meet <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-0952
WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id
Critical
CVE-2024-30499
CRM Perks Forms <= 1.1.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-30461
Tumult Hype Animations <= 1.9.11 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2024-30504
WP Travel Engine <= 5.7.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-2280
Better Elementor Addons <= 1.4.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links
Critical
CVE-2024-30498
CRM Perks Forms <= 1.1.4 - Unauthenticated SQL Injection
Medium
CVE-2024-30429
wp-forecast <= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2848
Responsive <= 5.0.2 - Missing Authorization to HTML Injection
Medium
CVE-2024-30423
Better Elementor Addons <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2039
Stackable – Page Builder Gutenberg Blocks <= 3.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Posts Block
High
CVE-2023-6999
Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2024-30485
Finale Lite <= 2.18.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.