Medium
CVE-2024-33678
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-1716
Admin Bar Remover <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-1759
WP ULike <= 4.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-33684
Save as PDF plugin by Pdfcrowd <= 3.2.0 - Missing Authorization
Medium
CVE-2024-2838
WPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-0905
Fancy Product Designer <= 6.1.7 - Reflected Cross-Site Scripting
High
CVE-2024-1797
WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes
Medium
CVE-2024-3588
Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'
Low
CVE-2024-3034
BackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversal
High
CVE-2024-3231
Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-33695
Fan Page Widget by ThemeNcode <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-2258
Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting
Medium
CVE-2024-2429
Salon booking system <= 9.6.5 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-4234
Filterable Portfolio <= 1.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-33697
CF7 File Download – File Download for CF7 <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3870
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-3342
Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-33696
WordPress Ad Widget <= 2.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-33686
ColibriWP Theme framework <= (Various Versions) - Missing Authorization
Medium
CVE-2024-33694
Meks ThemeForest Smart Widget <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-28002
Cornerstone <= 0.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-33693
Meks Smart Social Widget <= 1.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-1572
WP ULike <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-33682
WP GDPR Compliance <= 2.0.23 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.