Medium
CVE-2024-37262
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2024-6164
Filter & Grids <= 2.8.32 - Unauthenticated Local File Inclusion
High
CVE-2024-37260
Foxiz <= 2.3.5 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-37263
Enter Addons <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37269
Masterstudy Elementor Widgets <= 1.2.2 - Missing Authorization
Medium
CVE-2024-37258
Social Rocket <= 1.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-35757
Easy Age Verify <= 1.8.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5601
Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode
Medium
CVE-2024-6283
DethemeKit For Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery Widget
Medium
CVE-2024-5289
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting in Google Maps Widget
Medium
CVE-2024-38344
WP Tweet Walls <= 1.0.3 - Cross-Site Request Forgery
Medium
CVE-2024-38345
Super Testimonials <= 3.0.0 - Cross-Site Request Forgery
Medium
CVE-2024-4983
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6262
Portfolio Gallery – Image Gallery Plugin <= 1.6.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-4570
Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4569
Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37249
Advanced Custom Fields PRO < 6.3.2 - Missing Authorization
High
CVE-2024-6054
Auto Featured Image <= 1.2 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-37251
Advanced Custom Fields Pro <= 6.3.1 - Cross-Site Request Forgery
Low
CVE-2024-37253
WP Directory Kit <= 1.3.6 - Authenticated (Admin+) HTML Injection
Medium
CVE-2024-37250
Advanced Custom Fields Pro <= 6.3.1 - Missing Authorization
Medium
CVE-2024-5215
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2024-5173
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings
High
CVE-2024-4869
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.