Medium
CVE-2024-43960
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-43964
DSGVO All in one for WP <= 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43922
NitroPack <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-43948
WP Armour Extended <= 1.26 - Reflected Cross-Site Scripting
Critical
CVE-2024-43955
Droip < 2.5.2 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-43937
WP Crowdfunding <= 2.1.10 - Missing Authorization to Authenticated (Subscriber+) to Enable/Disable Addons
Critical
CVE-2024-43966
WP Testimonial Widget <= 3.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-43959
Testimonials <= 3.0.8 - Reflected Cross-Site Scripting
High
CVE-2024-7351
Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2024-6631
ImageRecycle pdf & image compression <= 3.1.14 - Missing Authorization in Several AJAX Actions
Medium
CVE-2024-2254
RT Easy Builder – Advanced addons for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-site Scripting
Medium
CVE-2023-6987
String Locator <= 2.6.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-6499
WordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosure
High
CVE-2024-7129
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.42 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2024-8120
ImageRecycle pdf & image compression <= 3.1.14 - Cross-Site Request in Several AJAX Actions
High
CVE-2024-7863
Favicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-7133
My Sticky Bar <= 2.7.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0926
Custom Permalinks <= 2.6.0 - Authenticated(Editor+) Stored Cross-Site Scripting
Critical
CVE-2024-7568
Favicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Deletion
High
CVE-2024-7656
Image Hotspot by DevVN <= 1.2.5 - Authenticated (Author+) PHP Object Injection
Critical
CVE-2024-7772
Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-6850
Carousel Slider <= 2.2.13 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-5502
Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
High
CVE-2024-7258
WooCommerce Google Feed Manager <= 2.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.