Medium
CVE-2024-49312
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-9891
Multiline files upload for contact form 7 <= 2.8.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation
Medium
CVE-2024-49281
Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49282
Responsive Lightbox <= 2.4.8 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2024-49315
FREE DOWNLOAD MANAGER <= 1.0.0 - Unauthenticated Arbitrary File Download
Critical
CVE-2024-49318
My Reading Library <= 1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-49280
Lightbox slider – Responsive Lightbox Gallery <= 1.10.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-49299
Surfer <= 1.5.0.502 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-9305
AppPresser – Mobile App Framework <= 4.4.4 - Privilege Escalation and Account Takeover via Weak OTP
Critical
CVE-2024-49291
Cooked Pro < 1.8.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-49313
VKontakte Wall Post <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-9649
WP ULike <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion
Medium
CVE-2024-9104
UltimateAI <= 2.8.3 - Limited User Password Change due to Improper Empty and Missing Default Value Check
Critical
CVE-2024-49322
Job Board Manager for WordPress <= 1.0 - Unauthenticated Privilege Escalation
Medium
CVE-2024-8787
Smart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-49292
Exclusive Addons Elementor <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9873
Community by PeepSo <= 6.4.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-49305
Email Verification for WooCommerce <= 2.8.10 - Unauthenticated SQL Injection
Medium
CVE-2024-49311
Edwiser Bridge <= 3.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-9883
Pods <= 3.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-49276
Clio Grow <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9521
SEO Manager <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
Medium
CVE-2024-49297
Zoho CRM Lead Magnet <= 1.7.9.7 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-7876
Appointment Booking Calendar <= 1.6.7.53 - Authenticated (Admin+) Stored Cross-Site Scripting via Appointment Settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.