Medium
CVE-2024-49244
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-9820
WP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass
Medium
CVE-2024-49255
Da Reactions <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49224
Mitm Bug Tracker <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-49239
Add Categories Post Footer <= 2.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-48046
Contact Form by Supsystic <= 1.7.28 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-49258
WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2024-49271
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.121 - Authenticated (Editor+) Remote Code Execution
Medium
CVE-2024-49264
Events Addon for Elementor <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-48049
Mighty Builder <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-49242
Digital Lottery <= 3.0.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-49256
Htaccess File Editor <= 1.0.18 - Missing Authorization
Medium
CVE-2024-49235
Contact Forms, Live Support, CRM, Video Messages <= 1.10.3 - Unauthenticated Information Disclosure
Medium
CVE-2024-49252
Leyka <= 3.31.6 - Missing Authorization
High
CVE-2024-49251
Maan Addons For Elementor <= 1.0.1 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-49253
Analyse Uploads <= 0.5 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2024-49254
ajax-extend <= 1.0 - Unauthenticated Remote Code Execution
Medium
CVE-2024-49259
Primary Addon for Elementor <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-49243
Dynamic Elementor Addons <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-48048
Wsify Widget <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-49229
Better Author Bio <= 2.7.10.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-49241
Tito <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-49245
Ahime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Download
Medium
CVE-2024-49250
Table of Contents Plus <= 2408 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.