Medium
CVE-2024-5251
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-6660
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload
Medium
CVE-2024-3973
House Manager – Easy Renter Management System for WordPress <= 1.0.8.4 - Reflected Cross-Site Scripting
High
CVE-2024-6467
BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
Medium
CVE-2024-6766
Shortcodes Ultimate Pro <= 7.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-6651
WordPress File Upload <= 4.24.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-7084
Ajax Search Lite < 4.12 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-38768
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) <= 2.0.8.6 - Authenticated (contributor+) Local File Inclusion
Medium
CVE-2024-7082
Easy Table of Contents <= 2.0.67.1 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2024-6494
WordPress File Upload <= 4.24.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-6033
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import
Medium
CVE-2024-6579
Web and WooCommerce Addons for WPBakery Builder <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification
Medium
CVE-2024-6565
AForms <= 2.2.6 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-4780
Image Hover Effects – Elementor Addon <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameter
Medium
CVE-2024-6557
SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-3636
Pinpoint Booking System <= 2.9.9.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-6457
HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection
Medium
CVE-2024-6270
Community Events <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-1937
Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification
Medium
CVE-2024-3587
Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'
Medium
CVE-2024-6621
WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update
Medium
CVE-2024-2232
Himer - Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites
Medium
CVE-2024-6570
Glossary <= 2.2.26 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6498
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.