Medium
CVE-2024-7786
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-7064
ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6846
Chatbot with ChatGPT <= 2.4.4 - Missing Authorization
Medium
CVE-2024-6532
Sheet to Table Live Sync for Google Sheet <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via STWT_Sheet_Table Shortcode
High
CVE-2024-4389
Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-6711
Event Tickets with Ticket Scanner <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6020
Sign-up Sheets <= 2.2.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-6888
Secure Copy Content Protection and Content Locking <= 4.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6708
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6889
Secure Copy Content Protection and Content Locking <= 4.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-7588
Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block
High
CVE-2024-6823
Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action
Medium
CVE-2024-7247
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Countdown Widgets
Medium
CVE-2024-7092
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter
Critical
CVE-2024-7094
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution
Medium
CVE-2024-43269
Backup and Restore Wordpress <= 1.50 - Cross-Site Request Forgery to Backup Trigger
Medium
CVE-2024-43251
Bit Form Pro <= 2.6.4 - Authenticated (Subscriber+) Sensitive Information Exposure
High
CVE-2024-43271
Woo Products Widgets For Elementor <= 2.0.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43260
Clearfy Cache <= 2.2.4 - Missing Authorization
High
CVE-2024-43252
Crew HRM <= 1.1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-7692
Flaming Forms <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-43239
Masteriyo - LMS <= 1.11.4 - Authenticated (Student+) Insecure Direct Object Reference
Medium
CVE-2024-7388
WP Bannerize Pro <= 1.9.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43241
Indeed Membership Pro <= 12.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.