Medium
CVE-2024-27960
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2024-2325
Link Library <= 7.6.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-27958
Visualizer <= 3.10.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-27956
Automatic <= 3.92.0 - Unauthenticated SQL Injection
Medium
CVE-2024-27968
Super Page Cache for Cloudflare <= 4.7.5 - Cross-Site Request Forgery
Medium
CVE-2024-1465
Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget
Critical
CVE-2024-27957
Pie Register <= 3.8.3.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-27963
Crisp <= 0.44 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-1464
Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget
Medium
CVE-2024-2183
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget
Medium
CVE-2024-2186
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget
Medium
CVE-2024-2181
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Medium
CVE-2024-27965
WPFunnels <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-2322
WooCommerce Cart Abandonment Recovery <= 1.2.26 - Cross-Site Request Forgery to Templates/Abandoned Orders Deletion
Critical
CVE-2024-2172
Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalation
Critical
CVE-2024-27954
Automatic <= 3.92.0 - Unauthenticated Arbitrary File Download and Server-Side Request Forgery
Medium
CVE-2024-1466
Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widget
Medium
CVE-2024-2198
Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_address
Medium
CVE-2024-0592
Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgery
Medium
CVE-2024-1640
Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration
Medium
CVE-2024-2079
WPBakery Page Builder Addons by Livemesh <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-2200
Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject
Medium
CVE-2024-2226
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-27964
Zippy <= 1.6.9 - Authenticated (Editor+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.