Medium
CVE-2023-7200
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-24717
Beds24 Online Booking <= 2.0.23 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5124
Pagelayer <= 1.7.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via Header/Footer code
Medium
CVE-2024-24713
Auto Listings <= 2.6.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-24798
Debug <= 1.10 - Cross-Site Request Forgery
Medium
CVE-2024-24706
WP-CFM <= 1.7.8 - Cross-Site Request Forgery via multiple AJAX functions
High
CVE-2023-6279
Woostify Sites Library <= 1.4.7 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Medium
CVE-2024-24702
Page Restrict <= 2.5.5 - Cross-Site Request Forgery via pr_admin_page
High
CVE-2024-23825
TablePress <= 2.2.4 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files
Medium
CVE-2024-24802
JTRT Responsive Tables <= 4.1.9 - Cross-Site Request Forgery
Medium
CVE-2024-24718
PropertyHive <= 2.0.6 - Missing Authorization via activate_pro_feature
Medium
CVE-2024-24704
Load More Anything <= 3.3.3 - Missing Authorization to Plugin Settings Modification
High
CVE-2024-1072
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.15.21 - Missing Authorization via seedprod_lite_new_lpage
Medium
CVE-2024-24719
Location Picker at Checkout for WooCommerce <= 1.8.9 - Missing Authorization via checkout_map_rules_order_ajax_handler
Critical
CVE-2024-24797
ERE Recently Viewed <= 1.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-24701
Setka Editor <= 2.1.20 - Cross-Site Request Forgery via handleRequest
Medium
CVE-2024-23524
PilotPress <= 2.0.30 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX functions
Medium
CVE-2024-24709
Shareaholic <= 9.7.11 - Missing Authorization via accept_terms_of_service
Medium
550872c8-3663-48fa-ab3f-f90351f3e169
Relevanssi Pro < 2.25 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1129
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred()
Medium
CVE-2024-24801
OWL Carousel <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-24796
Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently <= 4.1.1 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save
Medium
CVE-2024-0796
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Cross-Site Request Forgery
Medium
CVE-2023-47526
Chartify <= 2.0.6 - Authenticated(Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.