Medium
CVE-2024-3519
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,538
High
CVE-2024-3518
Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-3926
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom_attributes
Critical
CVE-2024-5147
WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.37 - Unauthenticated Local File Inclusion
High
CVE-2024-6809
Simple Video Directory <= 1.4.2 - Unauthenticated SQL Injection
Medium
CVE-2024-2953
LuckyWP Table of Contents <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-4157
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues
Medium
CVE-2023-6487
LuckyWP Table of Contents <= 2.1.5 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2024-4261
Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-4262
Piotnet Addons For Elementor <= 2.4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Attributes
Medium
CVE-2024-0453
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback
Critical
CVE-2024-35700
UserPro <= 5.1.8 - Unauthenticated Account Takeover to Privilege Escalation
Medium
CVE-2024-0632
Automatic Translator with Google Translate <= 1.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom Font
Medium
CVE-2024-3927
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass
Medium
CVE-2024-0452
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback
Medium
CVE-2024-0451
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback
Medium
CVE-2024-4700
WP Table Builder – WordPress Table Plugin <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4695
Move Addons for Elementor <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2024-4553
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcode
Medium
CVE-2024-35191
verbb/formie Server-Side Template Injection for variable-enabled settings
Medium
CVE-2024-4875
HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update
High
CVE-2024-4566
ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification
Medium
CVE-2024-3345
ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode
Medium
CVE-2024-34899
AVideo cross-site scripting vulnerability in the view/about.php page
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.