Medium
CVE-2024-6712
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-4194
Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-6713
PVN Auth Popup <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-6956
EasyAzon – Amazon Associates Affiliate Plugin <= 5.1.0 - Reflected Cross-Site Scripting via easyazon-cloaking-locale
Medium
CVE-2024-5573
Easy Table of Contents <= 2.0.65 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-6668
ProfilePro <= 1.3 - Authenticated (Subscriber+) Stored Cross Site Scripting
Medium
CVE-2024-5169
Video Widget <= 1.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5199
Spotify Play Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5489
Wbcom Designs - Custom Font Uploader <= 2.3.4 - Missing Authorization to Font Deletion
High
CVE-2023-6968
The Moneytizer <= 9.6.3 - Cross-Site Request Forgery via multiple AJAX actions
Medium
CVE-2024-5038
Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2024-37273
Jan path traversal vulnerability
Critical
CVE-2024-36858
Jan path traversal vulnerability
High
CVE-2024-36857
Jan path traversal vulnerability
Medium
CVE-2024-5536
GamiPress – Link <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4821
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode
Medium
CVE-2024-3469
GP Premium <= 2.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-5571
EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget
High
CVE-2024-4743
LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-5453
ProfileGrid <= 5.8.6 - Missing Authorization
Medium
CVE-2024-4939
Weaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode
Medium
CVE-2024-5439
Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5006
Boostify Header Footer Builder for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter
Medium
CVE-2024-4088
Gutenberg Blocks and Page Layouts – Attire Blocks <= 1.9.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.