Medium
CVE-2024-31341
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2026-15283
WPvivid Backup for MainWP <= 0.9.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31302
Contact Form Email <= 1.3.44 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-2656
Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import
Medium
CVE-2024-1352
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization
Medium
CVE-2024-0872
Watu Quiz <= 3.4.1 - Sensitive Information Disclosure
Critical
CVE-2024-3136
MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template
High
CVE-2024-1315
Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account
Medium
CVE-2026-15302
ARMember <= 4.0.27 - Directory Traversal via X-FILENAME
Medium
CVE-2024-1289
LearnPress <= 4.2.6.3 - Insecure Direct Object Reference
High
CVE-2024-2008
Modal Popup Box – Popup Builder, Show Offers And News in Popup <= 1.5.2 - Authenticated (Contributor+) PHP Object Injection in awl_modal_popup_box_shortcode
Critical
CVE-2024-31231
Rehub <= 19.6.1 - Unauthenticated Local File Inclusion
High
CVE-2024-31232
Rehub <= 19.6.1 - Authenticated (Editor+) Local File Inclusion
Medium
CVE-2024-2654
File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal
High
CVE-2024-1792
CMB2 <= 2.10.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-2972
Floating Chat Widget <= 3.1.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-1418
CGC Maintenance Mode <= 1.2 - Sensitive Information Exposure
Medium
CVE-2024-2830
WordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-31230
ShortPixel Adaptive Images <= 3.8.2 - Missing Authorization in activate_ai_handler and deactivate_ai_handler
High
CVE-2024-2125
EnvíaloSimple: Email Marketing y Newsletters <= 2.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-2931
WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure
Medium
CVE-2024-31101
AI Twitter Feeds (Twitter widget & shortcode) <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-31094
Filter Custom Fields & Taxonomies Light <= 1.05 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-30555
Ultimate Social Comments – Email Notification & Lazy Load <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.