Medium
CVE-2024-2458
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-3267
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode
Medium
CVE-2024-31294
WP Sort Order <= 1.3.1 - Missing Authorization
Critical
CVE-2024-31260
Edwiser Bridge <= 3.0.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-2081
FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-2439
Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-31291
ProfileGrid <= 5.7.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Critical
CVE-2024-31290
Demo My WordPress <= 1.0.9.1 - Unauthenticated Privilege Escalation
Medium
CVE-2024-31279
Generate Child Theme <= 2.0 - Cross-Site Request Forgery via process_create_form()
Medium
CVE-2024-31295
Captcha by BestWebSoft <= 5.2.0 - Captcha Bypass
Medium
CVE-2024-2471
FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields
Medium
CVE-2024-2950
BoldGrid Easy SEO – Simple and Effective SEO <= 1.6.14 - Information Exposure
Medium
CVE-2024-31352
Email Subscribers & Newsletters <= 5.7.13 - Missing Authorization
Medium
CVE-2024-3058
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery
High
CVE-2024-31308
WP Import Export Lite <= 3.9.26 - Authenticated (Administrator+) PHP Object Injection
Critical
CVE-2024-31292
Import XML and RSS Feeds <= 2.1.5 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2024-31305
Transcoder <= 1.3.5 - Cross-Site Request Forgery
Medium
CVE-2024-3208
Sydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Medium
CVE-2024-2837
WP Chat App <= 3.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-31256
WebinarPress <= 1.33.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-2159
Sassy Social Share <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-31255
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-31258
Form to Chat App <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31239
Nudgify Social Proof, Sales Popup & FOMO <= 1.3.3 - Cross-Site Request Forgery via sync_orders_manually()
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.