Medium
CVE-2024-31281
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-3048
Bannerlid <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-31269
Easy Google Maps <= 1.11.11 - Cross-Site Request Forgery
High
CVE-2024-31240
WP Poll Maker <= 3.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2024-31261
Announcer – Notification & message bars <= 6.0 - Missing Authorization
Medium
CVE-2024-0662
FancyBox for WordPress 3.0.2 - 3.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-1428
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trailer Box Widget
Medium
CVE-2024-31257
Formsite | Embed online forms to collect orders, registrations, leads, and surveys <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31262
WooCommerce Checkout Field Editor (Checkout Manager) <= 2.1.8 - Cross-Site Request Forgery
Medium
CVE-2024-31299
ReDi Restaurant Reservation <= 24.0128 - Cross-Site Request Forgery via redi_restaurant_admin_options_page()
Medium
CVE-2024-31245
ConvertKit <= 2.4.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31253
OAuth Server <= 4.3.3 - Open Redirect
Medium
CVE-2024-2603
Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting via Email Settings
Medium
CVE-2024-31287
Media Library Folders <= 8.1.8 - Authenticated (Author+) Directory Traversal
Medium
CVE-2024-31293
Easy Digital Downloads <= 3.2.6 - Cross-Site Request Forgery
Medium
CVE-2024-31247
FG Drupal to WordPress <= 3.70.3 - Sensitive Information Exposure
Medium
CVE-2024-31254
WordPress Backup & Migration <= 1.4.7 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-31288
RapidLoad Power-Up for Autoptimize <= 2.2.11 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-31271
Ultimate Maps by Supsystic <= 1.2.16 - Cross-Site Request Forgery
Medium
CVE-2024-31346
Gradient Text Widget for Elementor <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1994
Image Watermark <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification
Medium
CVE-2024-2310
WP Google Review Slider <= 13.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-31264
Post Views Counter <= 1.4.4 - Cross-Site Request Forgery via save_bulk_post_views()
Critical
CVE-2024-31237
s2Member <= 240315 - Limited Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.