Medium
CVE-2024-3162
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-0598
Gutenberg Blocks by Kadence Blocks <= 3.2.17 - Authenticated(Editor+) Stored Cross-Site Scripting via Contact Form Message Settings
Medium
CVE-2024-3062
Save as PDF by Pdfcrowd <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-2879
LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection
Medium
CVE-2024-1327
Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box
Medium
CVE-2024-31230
ShortPixel Adaptive Images <= 3.8.2 - Missing Authorization in activate_ai_handler and deactivate_ai_handler
High
CVE-2024-30250
In Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-lists
Medium
CVE-2024-27609
Bonita cross-site scripting vulnerability
Medium
CVE-2024-2925
Beaver Builder – WordPress Page Builder <= 2.8.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
Medium
CVE-2024-1946
Genesis Blocks <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Content
Medium
CVE-2024-2839
Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1807
Product Sort and Display for WooCommerce <= 2.4.1 - Missing Authorization
Medium
CVE-2024-2334
Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload
Medium
CVE-2024-1732
Sharkdropship for AliExpress Dropshipping and Affiliate <= 2.2.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-1504
SecuPress Free — WordPress Security <= 2.2.5.1 - Cross-Site Request Forgery to Banned IP Address
Medium
CVE-2024-2924
Creative Addons for Elementor <= 1.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2125
EnvíaloSimple: Email Marketing y Newsletters <= 2.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-2791
Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets
Medium
CVE-2023-7252
Tickera – WordPress Event Ticketing <= 3.5.2.4 - Insecure Direct Object Reference to Information Exposure
Medium
CVE-2024-2931
WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure
High
CVE-2024-1852
WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-29900
@electron/packager's build process memory potentially leaked into final executable
Medium
CVE-2024-29901
@workos-inc/authkit-nextjs session replay vulnerability
Medium
CVE-2024-29200
Kimai API returns timesheet entries a user should not be authorized to view
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.