Medium
CVE-2024-43210
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
High
CVE-2024-43221
JetGridBuilder <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43225
Enter Addons <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4359
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read
Medium
CVE-2024-4360
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag
Medium
CVE-2024-43124
Graphina <= 1.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43123
Card Elements for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6824
Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update
High
CVE-2024-43129
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43150
Xpro Elementor Addons <= 1.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43140
Ultimate Bootstrap Elements for Elementor <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-6872
Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor & Gutenberg Blocks! – TemplateSpare <= 2.4.2 - Missing Authorization to Authenticated (Subscriber+) Theme Update
Medium
CVE-2024-4643
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39649
Essential Addons for Elementor <= 5.9.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39662
Black Widgets For Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39644
Black Widgets For Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39668
Extensions for Elementor <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2455
Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL
Critical
CVE-2024-6459
News Element Elementor Blog Magazine <= 1.0.5 - Unauthenticated Local File Inlcusion
Medium
CVE-2024-6627
Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget
Medium
CVE-2024-5614
Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-39634
PowerPack Pro for Elementor <= 2.10.14 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2024-5818
Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget
High
CVE-2024-38772
JetWidgets for Elementor and WooCommerce <= 1.1.7 - Authenticated (Contributor+) Limited Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.