Medium
CVE-2024-3674
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-4203
Premium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33907
Print My Blog – Print, PDF, & eBook Converter WordPress Plugin <= 3.26.2 - Missing Authorization
Medium
CVE-2024-33915
Debug Log Manager <= 2.3.1 - Missing Authorization via toggle_debugging
Medium
CVE-2024-3071
ACF On-The-Go <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Update
Critical
CVE-2024-33911
School Management Pro <= 10.3.4 - Authenticated (School Admin+) SQL Injection
High
CVE-2024-1895
Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta
High
CVE-2024-1897
Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode
Medium
CVE-2024-33909
iPages Flipbook <= 1.5.1 - Missing Authorization
Medium
CVE-2024-3021
Mhr Post Ticker <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-33919
RomethemeKit For Elementor <= 1.4.1 - Missing Authorization
Medium
CVE-2024-33937
Progressive WordPress (PWA) <= 2.1.13 - Missing Authorization
Medium
CVE-2024-3554
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-33912
Academy LMS <= 1.9.16 - Missing Authorization
Medium
CVE-2024-3206
Different Menu in Different Pages – Control Menu Visibility (All in One) <= 2.3.2 - Missing Authorization to Menu Duplication
Medium
CVE-2024-33923
SP Project & Document Manager <= 4.69 - Missing Authorization
Medium
CVE-2024-0847
5280 Bootstrap Modal Contact Form <= 1.0 - Cross-Site Request Forgery to Bulk Delete Messages
Medium
CVE-2024-3717
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure
Medium
CVE-2024-4083
Easy Restaurant Table Booking <= 1.0.0 - Cross-Site Request Forgery
High
CVE-2024-1896
Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode
Medium
CVE-2024-3074
Elementor ImageBox <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33921
ReviewX <= 1.6.21 - Missing Authorization
High
CVE-2024-2831
Calendar <= 1.3.14 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-33929
Directorist <= 7.8.6 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.