Medium
CVE-2024-1316
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-0657
Internal Link Juicer <= 2.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-6565
InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1319
Events Tickets Plus <= 5.9.0 - Missing Authorization to Information Exposure
Medium
CVE-2024-0442
Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-0842
Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service
Medium
CVE-2024-1122
Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export
Medium
CVE-2024-30468
All In One WP Security <= 5.2.6 - Cross-Site Request Forgery to IP Blocking
Medium
CVE-2024-0616
Passster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-1090
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in stopOptimizeAll
Medium
CVE-2024-0511
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta
Medium
CVE-2024-0965
Simple Page Access Restriction <= 1.0.21 - Improper Access Control to Sensitive Information Exposure via REST API
Medium
CVE-2024-0516
Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta
Medium
CVE-2024-0984
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in disableOptimization
Medium
CVE-2024-1336
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in optimizeAllOn
Medium
CVE-2024-1335
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in disableOptimization
Medium
CVE-2024-0512
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist
High
CVE-2024-1206
WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton
Medium
CVE-2024-0514
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare
Medium
CVE-2024-0515
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare
Medium
CVE-2023-5665
Payment Forms for Paystack <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1089
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in optimizeAllOn
Critical
CVE-2024-1207
Booking Calendar <= 9.9 - Unauthenticated SQL Injection
Medium
CVE-2024-1235
Elementor Addons by Livemesh <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.