Medium
CVE-2024-29772
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,415
Critical
CVE-2024-0399
WooCommerce Customers Manager <= 29.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-29807
DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via force_fit
Medium
CVE-2024-2871
Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-29914
Stratum <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1746
Testimonial Slider <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-0866
Check & Log Email <= 1.0.9 - Unauthenticated Hook Injection
Medium
CVE-2024-29907
SEO Backlink Monitor <= 1.5.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-29769
Portfolio Gallery – Image Gallery Plugin <= 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-29912
iCalendrier <= 1.80 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29913
Tutor LMS Elementor Addons <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30185
Element Pack Elementor Addons <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via link
Medium
CVE-2024-29767
Doneren met Mollie <= 2.10.2 - Unauthenticated Reflected Cross-Site Scripting via search
Medium
CVE-2024-1962
CM Download Manager < 2.9.1 - Cross-Site Request Forgery via editHeader
Medium
CVE-2024-29820
PDF Builder for WPForms <= 1.2.88 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29803
FlatPM < 3.1.05 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29931
WP Google Maps <= 9.0.29 - Reflected Cross-Site Scripting
Medium
CVE-2024-29815
WP Change Email Sender <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29760
Booster for WooCommerce <= 7.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-29924
Premium Packages <= 5.8.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-30196
Easy Social Share Buttons <= 9.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-30186
Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via title
Medium
CVE-2024-30177
Exclusive Addons Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29918
Survey Maker <= 4.0.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.