Medium
CVE-2024-9638
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-56024
Custom Dashboard Widget <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56036
odPhotogallery <= 0.5.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-12287
Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_user
Medium
CVE-2024-56022
Preloader by WordPress Monsters <= 1.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12500
Philantro – Donations and Donor Management <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-56042
WPLMS < 1.9.9.5.3 - Unauthenticated SQL Injection
High
CVE-2024-12025
Collapsing Categories <= 3.0.8 - Unauthenticated SQL Injection
High
CVE-2024-12432
WPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Key
Medium
CVE-2024-12469
WP BASE Booking of Appointments, Services and Events <= 4.9.1 - Reflected Cross-Site Scripting via status Parameter
Medium
CVE-2024-12127
Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS <= 0.0.21 - Reflected Cross-Site Scripting via page Parameter
High
CVE-2024-12024
EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name
High
CVE-2024-12293
User Role Editor <= 4.64.3 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-12220
SMS for WooCommerce <= 2.8.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12219
Stop Registration Spam <= 1.23 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2024-9624
WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import
Medium
CVE-2024-12239
PowerPack Lite for Beaver Builder <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameter
Medium
CVE-2024-11902
Slope Widgets <= 4.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11905
Animated Counters <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11906
TPG Get Posts <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11900
Portfolio – Filterable Masonry Portfolio Gallery for Professionals <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12443
CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51646
Saoshyant Element <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-11280
PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.