Medium
CVE-2024-31107
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-31123
SpiderFAQ <= 1.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-31104
GetResponse for WordPress <= 5.5.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31096
Nictitate <= 1.1.4 - Cross-Site Request Forgery
Medium
CVE-2024-30553
WP Twitter Mega Fan Box Widget <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-31085
Post-Plugin Library <= 2.6.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-2141
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Medium
CVE-2024-30545
Social Author Bio <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-2144
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget
Medium
CVE-2024-31102
Prenotazioni <= 1.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-30540
VS Contact Form <= 14.7 - CAPTCHA Bypass
High
CVE-2024-30532
Builderall Builder for WordPress <= 2.0.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-31119
Special Box for Content <= 1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-31106
Yoo Slider <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-0367
Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link
Medium
CVE-2024-30538
DELUCKS SEO <= 2.5.4 - Missing Authorization
Medium
CVE-2024-30527
WP Express Checkout (Accept PayPal Payments) <= 2.3.7 - Unauthenticated Price Manipulation
Critical
CVE-2024-30535
Easy Form Builder <= 3.7.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-30549
Contact Forms by Cimatti <= 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-31115
Chauffeur Taxi Booking System for WordPress <= 7.2 - Unauthenticated Arbitrary File Upload
High
CVE-2024-2047
ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw
Medium
CVE-2024-30552
Responsive flipbook <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2513
WP Chat App <= 3.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Image Attribute
Medium
CVE-2024-2948
Favorites <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.