Medium
CVE-2024-44064
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-44063
Happyforms <= 1.26.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-43995
Posterity <= 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44001
Royal Elementor Addons <= 1.3.982 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44059
Custom Query Blocks <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43987
Sliding Door <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-8016
The Events Calendar Pro <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution
Medium
CVE-2024-44057
Nirvana <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43992
LatePoint <= 4.9.91 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-43989
Justified Image Grid <= 4.6.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-8319
Tourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple Functions
Medium
CVE-2024-43998
Blogpoet <= 1.0.2 - Missing Authorization via blogpoet_install_and_activate_plugins()
Medium
CVE-2024-2541
Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File
Medium
CVE-2024-1384
Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-7418
The Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure
Unrated
CVE-2024-13269
drupal/adv_varnish - SA-CONTRIB-2024-033
Medium
CVE-2024-1056
Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post
Medium
CVE-2024-43985
Bus Ticket Booking with Seat Reservation <= 5.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-7895
Beaver Builder (Lite Version) <= 2.8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter
High
CVE-2024-7607
Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection
Medium
CVE-2024-5987
WP Accessibility Helper <= 0.6.2.8 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
Medium
CVE-2024-7857
Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injection
Medium
CVE-2024-3679
Premium SEO Pack – WP SEO Plugin <= 1.6.002 - Unauthenticated Information Exposure
Medium
CVE-2024-3944
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.