Medium
CVE-2024-2650
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,415
Medium
CVE-2024-29797
Grid Shortcodes <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30198
BuddyForms <= 2.8.5 - Reflected Cross-Site Scripting via page
Medium
CVE-2024-0588
Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery
Medium
CVE-2024-29926
WC Builder <= 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30180
Easy Social Feed <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via fb_appid
Medium
CVE-2024-29792
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.93 - Reflected Cross-Site Scripting
Medium
CVE-2024-29759
Calculated Fields Form <= 1.2.54 - Reflected Cross-Site Scripting
Medium
CVE-2024-1310
WooCommerce <= 8.5.2 - Missing Authorization to Private/Draft Product Disclosure
Medium
CVE-2024-2027
Real Media Library: Media Library Folder & File Manager <= 4.22.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2303
Easy Textillate <= 2.01 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1204
Meta Box – WordPress Custom Fields Framework <= 5.9.3 - Authenticated (Contributor+) Information Exposure via Post Meta
Medium
CVE-2024-30195
RoyalSlider <= 3.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-29813
Funnel Builder by CartFlows <= 2.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-29762
Off-Canvas Sidebars & Menus (Slidebars) <= 0.5.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29805
Shipping with Venipak for WooCommerce <= 1.19.5 - Reflected Cross-Site Scripting via 'venipak_labels_link'
Medium
CVE-2024-29806
ReDi Restaurant Reservation <= 24.0128 - Reflected Cross-Site Scripting
High
CVE-2023-7201
Everest Backup <= 2.2.4 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-1307
Smart Forms <= 2.6.93 - Missing Authorization
Medium
CVE-2024-2888
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.26.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1755
NPS computy <= 2.7.5 - Cross-Site Request Forgery to Results Deletion
Medium
CVE-2024-29928
Advanced Sermons <= 3.1 - Reflected Cross-Site Scripting via s
Medium
CVE-2024-2836
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.13.63 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-30179
Bold Page Builder <= 4.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via class
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.