Medium
CVE-2024-12049
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-12445
RightMessage WP <= 0.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11383
CC Canadian Mortgage Calculator <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11434
WP – Bulk SMS – by SMS.to <= 1.0.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-12453
Uptodown APK Download Widget <= 0.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11445
Image Magnify <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11810
PayGreen Payment Gateway <= 1.0.26 - Reflected Cross-Site Scripting
Medium
CVE-2024-12462
YOGO Booking <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11690
Financial Stocks & Crypto Market Data Plugin <= 1.10.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-11338
PIXNET Plugin <= 2.9.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-12457
Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-12264
PayU CommercePro Plugin <= 3.8.3 - Unauthenticated Privilege Escalation
Medium
CVE-2024-12332
School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection
Medium
CVE-2024-12207
Toggles Shortcode and Widget <= 1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-11496
Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update
Medium
CVE-2024-12290
Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter
Medium
CVE-2024-12140
Elementor AI Addons – 70 Widgets, Premium Templates, Ultimate Elements <= 2.2.1 - Authenticated (Contributor+) Private Templates Content Disclosure
Medium
CVE-2024-12261
SmartEmailing.cz <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11363
Same but Different – Related Posts by Taxonomy <= 1.0.16 - Reflected Cross-Site Scripting
Medium
CVE-2024-12126
SEO Keywords <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter
Medium
CVE-2024-12159
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords <= 3.1 - Information Exposure
Medium
CVE-2024-11290
Member Access <= 1.1.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-12214
WooCommerce HSS Extension for Streaming Video <= 3.31 - Reflected Cross-Site Scripting via videolink Parameter
Medium
CVE-2024-12435
Compare Products for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.