Medium
CVE-2024-31249
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-31236
Royal Elementor Addons <= 1.3.93 - Authenticated (Contributor+) Stored Cross-Site Scriting
Medium
CVE-2024-31246
PostX – Gutenberg Blocks for Post Grid <= 3.2.3 - Incorrect Authorization
Critical
CVE-2024-31277
Product Designer <= 1.0.32 - Unauthenticated PHP Object Injection
Medium
CVE-2024-31284
EmbedPress <= 3.9.8 - Missing Authorization via handle_calendly_data
Medium
CVE-2024-31243
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Deletion
Medium
CVE-2024-31344
Easy Login Styler – White Label Admin Login Page for WordPress <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
CVE-2024-31342
WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download
Medium
CVE-2024-31265
Sumo <= 1.34 - Cross-Site Request Forgery
Medium
CVE-2024-31248
All-in-One Video Gallery <= 3.5.2 - Missing Authorization
Medium
CVE-2024-31349
MailMunch – Grow your Email List <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3216
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset
Medium
CVE-2024-31252
Responsive Lightbox <= 2.4.6 - Missing Authorization via Information Disclosure
Medium
CVE-2024-31301
Multiple Page Generator Plugin – MPG <= 3.4.0 - Cross-Site Request Forgery
Medium
CVE-2024-31296
BookingPress <= 1.0.81 - Authenticated (Customer+) Insecure Direct Object Reference
Medium
CVE-2024-31278
Premium Addons for Elementor <= 4.10.22 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-0837
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Custom Gallery' Widget
Medium
CVE-2024-3245
EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Block
Medium
CVE-2024-31303
Sign-up Sheets <= 2.2.11.1 - Cross-Site Request Forgery
High
CVE-2024-1385
WP-Stateless – Google Cloud Storage <= 3.4.0 - Missing Authorization to Limited Arbitrary Options Update
Medium
CVE-2024-31267
Flexible Checkout Fields for WooCommerce <= 4.1.2 - Missing Authorization
Medium
CVE-2024-2296
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG
Critical
CVE-2024-31241
LearnPress Export Import <= 4.0.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-31343
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10.1 - Unauthenticated Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.