Medium
CVE-2024-43253
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-7691
Flaming Forms <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-43242
Indeed Membership Pro <= 12.7 - Unauthenticated PHP Object Injection
Medium
CVE-2024-43265
Analytify <= 5.3.1 - Cross-Site Request Forgery to Opt-out
Medium
CVE-2024-43259
Order Export for WooCommerce <= 3.23 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-43262
Busiprof <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43257
Leopard - WordPress offload media <= 2.0.36 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-6853
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Welcome Popup Update
Medium
CVE-2024-7556
Wordpress Simple Share Plugin <= 0.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6925
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-6856
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to SMTP Settings Update
Critical
CVE-2024-6928
Opti Marketing <= 2.0.9 - Unauthenticated SQL Injection
Medium
CVE-2024-6855
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Exit Popup Update
Medium
CVE-2024-6852
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-6797
DL Robots.txt <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-6924
TrueBooker <= 1.0.3 - Unauthenticated SQL Injection
Medium
CVE-2024-6798
DL Verification <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6859
WP MultiTasking <= 0.1.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-7648
Opal Membership <= 1.2.4 - Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2024-7621
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Critical
CVE-2024-7503
WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
Medium
CVE-2024-7649
Opal Membership <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-43227
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43233
BSK Forms Blacklist <= 3.8 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.