Medium
CVE-2024-29089
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2024-27994
YITH WooCommerce Product Add-Ons <= 4.5.0 - Unuathenticated Cross-Site Scripting
Medium
CVE-2024-2042
ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
Medium
CVE-2024-2294
Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2024-27996
Survey Maker <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-29102
Extensions For CF7 <= 3.0.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-2287
Knight Lab Timeline <= 3.9.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-29091
WP Armour – Honeypot Anti Spam <= 2.1.13 - Reflected Cross-Site Scripting
Medium
CVE-2024-29103
Database for Contact Form 7 <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29096
MJM Clinic <= 1.1.22 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2024-1685
Social Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-27988
WEN Responsive Columns <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-27989
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29092
Permalink Manager Lite <= 2.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-29107
Elementor Addon Elements <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-1813
Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
Medium
CVE-2024-29104
Ticket Tailor <= 1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29105
WP Popups <= 2.1.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-27992
Link Whisper Free <= 0.6.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-27991
SupportCandy <= 3.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-29093
Builder for WooCommerce reviews shortcodes – ReviewShort <= 1.01.3 - Cross-Site Request Forgery
Medium
CVE-2024-2308
ElementInvader Addons for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29094
HT Easy GA4 ( Google Analytics 4 ) <= 1.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-27998
Barcode Scanner with Inventory & Order Manager <= 1.5.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.