Medium
CVE-2024-10076
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 93
Reset filters
Medium
CVE-2024-10075
Jetpack <= 13.7 - Unauthenticated Arbitrary Block & Shortcode Execution
Medium
CVE-2024-9926
Jetpack < 13.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure
Medium
CVE-2024-6584
Jetpack Boost <= 3.4.6 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2024-4392
Jetpack – WP Security, Backup, Speed, & Growth <= 13.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode
Medium
CVE-2024-3957
Booster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-3940
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-3941
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-29760
Booster for WooCommerce <= 7.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-1534
Booster for WooCommerce <= 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
Medium
CVE-2024-1054
Booster for WooCommerce <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-7168
Better Follow Button for Jetpack <= 8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-48333
Booster for WooCommerce <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+) Order Information Disclosure
Medium
CVE-2023-48747
Booster for WooCommerce <= 7.1.2 - Missing Authorization to Product Creation/Modification
Medium
CVE-2023-47788
Jetpack <= 12.6.2 - Improper Authorization via WPCom External Media REST endpoints
Medium
CVE-2023-47774
Jetpack < 12.7 - Authenticated(Contributor+) Clickjacking via Iframe Injection
Medium
CVE-2023-45050
Jetpack <= 12.8-a.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via block attribute
Medium
CVE-2023-5638
Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-40002
Booster for WooCommerce <= 7.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Medium
CVE-2023-4796
Booster for WooCommerce <= 7.1.0 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Medium
CVE-2023-4945
Booster for WooCommerce <= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
e1dbd0e2-8c6c-4127-b37c-269af3b7f71c
Jetpack CRM <= 5.5.0 - Authenticated (Client+) Stored Cross-Site Scripting
Medium
32f2fc21-165c-483f-ab81-48d8f221e4be
Jetpack CRM <= 5.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
0903bd2b-240f-4791-bfa6-f727d193af4a
Booster for WooCommerce 7.0.0 - Authenticated (Shop Manager+) Missing Authorization to Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.