Medium
CVE-2024-4432
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-2772
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-2782
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation
Critical
CVE-2024-2771
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation
Medium
CVE-2024-4849
WordPress Automatic <= 3.94.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter
Medium
CVE-2024-4374
DethemeKit For Elementor <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2024-3714
GiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4865
Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter
Medium
CVE-2024-4621
ARforms <= 6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-4442
Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-34764
Essential Addons for Elementor <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34789
Post Grid Elementor Addon <= 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag
Medium
CVE-2024-34766
ChaosTheory <= 1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-34790
ImageMagick Sharpen Resized Images <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-34767
ShopLentor <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34804
Tagembed <= 5.8 - Missing Authorization
Medium
CVE-2024-2697
Swift Framework < 2024.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4756
WP Backpack <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-35162
Download Plugins and Themes from Dashboard <= 1.8.5 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2024-3288
Logo Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4709
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4698
Testimonial Carousel For Elementor <= 10.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34769
Elegant Blocks <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5003
WP Stacker <= 1.8.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.