Medium
CVE-2024-1364
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
Medium
CVE-2024-24700
WP Editor <= 1.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-24800
Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More <= 13.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-22311
Simply Schedule Appointments <= 1.6.6.20 - Reflected Cross-Site Scripting
Critical
CVE-2024-30223
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.26 - Unauthenticated PHP Object Injection
Medium
CVE-2024-28001
Favicon Rotator <= 1.2.10 - Reflected Cross-Site Scripting
Critical
CVE-2024-30240
Calendarista <= 15.5.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-2643
My Sticky Bar <= 2.6.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-2889
WP-Lister Lite for Amazon <= 2.6.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-28003
Max Mega Menu <= 3.3. - Missing Authorization
Medium
CVE-2024-2210
The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing
Medium
CVE-2024-30200
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-2261
Event Tickets and Registration <= 5.8.2 - Improper Authorization to Information Disclosure
Critical
CVE-2024-30238
Photos and Files Contest Gallery <= 21.3.2 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-30242
Contact Form to Any API <= 1.1.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-29090
AI Engine <= 2.1.4 - Authenticated (Editor+) Server-Side Request Forgery
Medium
CVE-2024-27999
Preview E-mails for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-2962
Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorization
Medium
CVE-2024-29808
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'image_id'
Critical
CVE-2024-30237
Slider by Supsystic <= 1.8.10 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-29832
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'current_url'
Medium
CVE-2024-29809
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'image_url'
Medium
CVE-2024-2906
Radio Player <= 2.0.73 - Missing Authorization via get_players
High
CVE-2024-30244
Church Admin <= 4.0.27 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.