Medium
CVE-2024-0956
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 391
Reset filters
High
CVE-2024-0609
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-0608
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-0913
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection
Medium
CVE-2024-1412
Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error
Medium
CVE-2024-2289
PowerPack Lite for Beaver Builder <= 1.3.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via element link
Medium
CVE-2024-1904
MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts
Medium
CVE-2024-1526
Hubbub Lite <= 1.31.0 - Unauthenticated Information Exposure
Medium
CVE-2024-1912
Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPosition
Medium
CVE-2024-1653
Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxUpdateFolderPosition
Medium
CVE-2024-1411
PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget
Medium
CVE-2024-1337
SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection
Medium
CVE-2024-1055
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-24877
Wonder Slider Lite <= 13.9 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2024-24843
PowerPack Pro for Elementor < 2.10.8 - Cross-Site Request Forgery to Plugin Settings Modification and Cross-Site Scripting
High
CVE-2024-24844
PowerPack Pro for Elementor <= 2.10.6 - Missing Authorization to Settings Reset
Medium
CVE-2024-0701
UserPro <= 5.1.6 - Disabled Membership Registration Bypass
High
CVE-2024-21747
WP ERP <= 1.12.8 - Authenticated (Accounting manager+) SQL Injection
Medium
CVE-2023-6984
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgery
Medium
CVE-2023-49739
PowerPack Pro for Elementor <= 2.9.23 - Reflected Cross-Site Scripting
Medium
CVE-2023-2439
UserPro <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-48277
Super Progressive Web Apps <= 2.2.21 - Missing Authorization
High
CVE-2023-2497
UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection
Medium
CVE-2023-6008
UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.