Medium
CVE-2024-10692
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-54232
RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-54256
Easy Blocks pro <= 1.0.21 - Missing Authorization
High
CVE-2024-54248
eewee admin custom <= 1.8.2.4 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-11687
Next-Cart Store to WooCommerce Migration <= 3.9.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-54241
Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce <= 1.5 - Missing Authorization
Medium
CVE-2024-54224
ElementsReady Addons for Elementor <= 6.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54255
Login Widget With Shortcode <= 6.1.2 - Open Redirect
Medium
CVE-2024-4633
Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-9872
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-11289
Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion
Medium
CVE-2024-10903
Broken Link Checker <= 2.4.1 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2024-11729
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-11450
ONLYOFFICE Docs <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54223
ARForms Form Builder <= 1.7.1 - HTML Injection
Medium
CVE-2024-54247
ABCBiz Addons for Elementor <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54257
Tydskrif <= 1.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-54230
Unlock Addons for Elementor <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-54234
Limit Login Attempts <= 5.5 - Unauthenticated SQL Injeciton
Medium
CVE-2024-11276
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting
Medium
CVE-2024-11336
Clickbank WordPress Plugin (Storefront) <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-11223
WPForms <= 1.9.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-11728
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection
Medium
CVE-2024-54226
Country Blocker <= 3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.