Medium
CVE-2024-50443
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-50422
Breeze <= 2.1.14 - Missing Authorization
Medium
CVE-2024-50454
SEOPress <= 8.1.1 - Missing Authorization
Medium
CVE-2024-50413
Import and export users and customers <= 1.27.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-50431
Breeze <= 2.1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-50460
Firelight Lightbox <= 2.3.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-50412
Conditional Fields for Contact Form 7 <= 2.4.15 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-50449
PDF Generator Addon for Elementor Page Builder <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-50434
NewsCard <= 1.3 - Unauthenticated Local File Inclusion
Medium
CVE-2024-50470
Themes4WP YouTube External Subtitles <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50459
WordPress Stripe Donation and Payment Plugin <= 3.2.3 - Missing Authorization
Medium
CVE-2024-50472
Amilia Store <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50471
Trip Plan <= 1.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50468
Raptor Editor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50418
Time Slot <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9628
WPS Telegram Chat <= 4.6.0 - Authenticated (Subscriber+) Unauthorized Access to Telegram Bot API
Medium
CVE-2024-50421
WooCommerce PDF Invoices & Packing Slips <= 3.8.6 - Missing Authorization
Medium
CVE-2024-9686
Order Notification for Telegram <= 1.0.1 - Missing Authorization to Unauthenticated Send Telegram Test Message
High
CVE-2024-9235
Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update
Critical
CVE-2024-9488
Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider
Medium
CVE-2024-50461
EmbedPress <= 4.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50426
Survey Maker <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-50425
WP Booking System <= 2.0.19.10 - Missing Authorization via wpbs_refresh_calendar_editor
Medium
CVE-2024-50419
Greenshift – animation and page builder blocks <=9.7 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.