Medium
CVE-2024-51625
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-50540
(dp) AddThis <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6480
SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2024-51622
WP EASY RECIPE <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51617
Clyp <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51610
Display Terms Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50543
amazing neo icon font for elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51609
Emoji Shortcode <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51603
NMR Strava activities <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-51582
WP Hotel Booking <= 2.2.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-51611
WP Feature Box <= 0.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5029
CM Table Of Contents <= 1.2.3 - Cross-Site Request Forgery
Medium
CVE-2024-50548
Awesome Progress Bar <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8157
Alphabetical List <= 1.0.3 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-51599
Simple Business Manager <= 4.6.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51618
Custom Admin Menu <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51613
TradeMe widgets <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10677
BTEV <= Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2024-50536
GDReseller <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51626
Woocommerce Quote Calculator <= 1.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-51601
Website price calculator <= 4.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-50546
MyOrderDesk <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51575
Extender All In One For Elementor <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51607
Golf Tracker <= 0.7 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.