Medium
CVE-2024-10499
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 281
Reset filters
Medium
CVE-2024-10529
Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Deletion
Medium
CVE-2024-11143
Kognetiks Chatbot for WordPress <= 2.1.8 - Cross-Site Request Forgery to Authenticated (Subscriber+) Assistant Modification
Medium
CVE-2024-10684
Kognetiks Chatbot for WordPress <= 2.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-10531
Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Update
Medium
CVE-2024-10530
Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Addition
High
CVE-2024-52370
Hive Support – WordPress Help Desk <= 1.1.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-24536
WordPress Helpdesk & Live Chat Plugin Powered by AI – ThriveDesk <= 2.0.6 - Reflected Cross-Site Scripting
High
CVE-2024-52384
Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-10392
AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-50414
Button contact VR <= 4.7.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-7713
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.0.9 - Unauthenticated OpenAI Key Exposure
Medium
CVE-2024-7714
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.0.9 - Missing Authorization
Medium
CVE-2024-6845
Chatbot with ChatGPT <= 2.4.5 - Missing Authorization to Unauthenticated OpenAI API Key Exposure
Medium
CVE-2024-6723
AI Engine <= 2.4.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-43347
Button contact VR <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-6846
Chatbot with ChatGPT <= 2.4.4 - Missing Authorization
Medium
CVE-2024-43227
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43129
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-6722
Chatbot Support AI <= 1.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-6847
Chatbot with ChatGPT <= 2.4.4 - Unauthenticated SQL Injection
High
CVE-2024-6451
AI Engine <= 2.5.0 - Authenticated (Admin+) Remote Code Execution
High
CVE-2024-6843
Chatbot with ChatGPT <= 2.4.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-38791
AI Engine <= 2.4.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.