Medium
CVE-2024-51698
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-51761
WPHelpful <= 1.2.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-51709
TeleAdmin <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-51694
Geotagged Media <= 0.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-51693
Search order by product SKU for WooCommerce <= 0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-51787
ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51689
CF7 WOW Styler <= 1.6.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-51776
Daily Image <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-51778
Satisfaction Reports from Help Scout <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-11502
Planning Center Online Giving <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-49770
Path traversal in oak allows transfer of hidden files within the served root directory
Medium
CVE-2024-9896
BBP Core – Expand bbPress powered forums with useful features <= 1.2.5 - Reflected Cross-Site Scripting via add_query_arg Parameter
Medium
CVE-2024-51654
APK Downloader <= 1.0.0 - Cross-Site Request Forgery to Stored Cross Site Scripting
Medium
CVE-2024-51634
Webriti Custom Login <= 0.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-51680
Cresta Addons for Elementor <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51657
SmartLink Dynamic URLs <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-51650
Random Featured Post <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-51648
e-shops <= 1.0.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-51633
Simple Page Specific Sidebars <= 2.14.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-51663
Bricksable for Bricks Builder <= 1.6.59 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-51685
Accordion title for Elementor <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-51677
Knowledge Base <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51670
JS Help Desk – Best Help Desk & Support Plugin <= 2.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-51636
GMO Social Connection <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.