Medium
CVE-2024-0447
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-27192
Configure SMTP <= 3.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-0431
Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_set_default_card
Medium
CVE-2024-1906
Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxAddCategory
Medium
CVE-2024-1434
Media Alt Renamer 0.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via _wp_attachment_image_alt postmeta
Medium
CVE-2023-6969
User Shortcodes Plus <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via user_meta Shortcode
Medium
CVE-2024-1333
Responsive Pricing Table <= 5.1.10 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-1912
Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPosition
High
CVE-2024-27195
Watermark RELOADED <= 1.3.5 - Cross-Site Request Forgery via optionsPage
Medium
CVE-2024-1909
Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxRenameCategory
Medium
CVE-2024-1653
Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxUpdateFolderPosition
Medium
CVE-2024-1436
WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit <= 1.0.9 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-27197
BeePress <= 6.9.8 - Cross-Site Request Forgery via beepress-pro.php
Medium
CVE-2024-1687
Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-1686
Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Data Export
Medium
CVE-2024-1437
Adsmonetizer <= 3.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-0385
Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxAddCategory
High
CVE-2024-27194
Fontific | Google Fonts <= 0.1.6 - Cross-Site Request Forgery via ajax_fontific_save_all
Medium
CVE-2024-1907
Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory
Medium
CVE-2024-1323
Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1291
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1311
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-1806
ProfilePress <= 4.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via profilepress-edit-profile Shortcode
Medium
CVE-2024-1365
YML for Yandex Market <= 4.2.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.