Medium
CVE-2024-43124
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-43123
Card Elements for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-38787
Import and export users and customers <= 1.26.8 - Unauthenticated Information Exposure
Medium
CVE-2024-43157
FormCraft <= 1.2.10 - Missing Authorization
Medium
CVE-2024-6824
Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update
Medium
CVE-2024-43139
Football Pool <= 2.11.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-43148
StreamCast <= 2.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2024-7561
The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-43118
Hummingbird <= 3.9.1 - Missing Authorization
High
CVE-2024-43129
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43125
WP Table Builder – WordPress Table Plugin <= 1.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43149
CM Tooltip Glossary <= 4.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43165
WPSection <= 1.3.8 - Authenticated (Contributor+) Local File Inlcusion
Medium
CVE-2024-5668
Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.28 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes
Medium
CVE-2024-43158
Masteriyo - LMS <= 1.11.4 - Missing Authorization
Medium
CVE-2024-7590
Spectra – WordPress Gutenberg Blocks <= 2.15.0 - Authenticated (Contributor+) Stored Cross-site Scripting
Medium
CVE-2024-43161
Depicter Slider <= 3.1.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43126
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-43150
Xpro Elementor Addons <= 1.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43154
Advanced Cron Manager – debug & control <= 2.5.9 - Missing Authorization
Medium
CVE-2024-43147
Selection Lite <= 1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-43145
GeoDirectory <= 2.3.61 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-43138
Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-43140
Ultimate Bootstrap Elements for Elementor <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.