Medium
CVE-2024-0899
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2024-2580
Automation By Autonami <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2578
WP Coder <= 3.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-2538
Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification
Medium
CVE-2024-29139
MyCurator Content Curation <= 3.76 - Reflected Cross-Site Scripting
High
CVE-2024-29136
Tourfic <= 2.11.17 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-6777
WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service
Medium
CVE-2024-0826
Qi Addons For Elementor <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29137
Tourfic <= 2.11.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-1292
WPB Show Core <= 2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-1752
Font Farsi <= 1.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-29138
Restrict User Access – Membership Plugin with Force <= 2.5 - Reflected Cross-Site Scripting
High
CVE-2024-22259
Spring Framework URL Parsing with Host Validation Vulnerability
Medium
CVE-2024-29124
Advanced Access Manager <= 6.9.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29121
WooCommerce License Manager <= 5.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-29114
Download Manager <= 3.2.84 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29115
Smart Online Order for Clover <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29112
WooCommerce Google Feed Manager <= 2.2.0 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2024-29123
Link Library <= 7.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-29130
Contact Form 7 – PayPal & Stripe Add-on <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-29113
RegistrationMagic <= 5.2.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-29129
OxyExtras <= 1.4.4 - Unauthenticated Cross-Site Scripting
High
CVE-2024-29117
Contact Forms by Cimatti <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-29111
Sitekit <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.