Medium
CVE-2024-5332
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-37245
All In One Redirection <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-37248
Anima <= <=1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37246
Gallery Slideshow <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
379a5016-3968-4b28-8d6e-0f517e419016
Various Plugins <= Various Version - Use of Polyfill.io
Medium
CVE-2024-5451
The7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Critical
CVE-2024-6028
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
High
CVE-2024-5431
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
Medium
CVE-2024-6075
WP eStore <= 8.5.4 - Cross-Site Request Forgery to Coupon Deletion
Medium
CVE-2024-6073
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Discount Editing
Medium
CVE-2024-6307
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API
High
CVE-2024-5630
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2024-6072
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via REQUEST_URI
Medium
CVE-2024-6074
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Customer Editing
Medium
CVE-2024-3249
Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification
Medium
CVE-2024-6076
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Category Editing
Medium
CVE-2024-6289
WPS Hide Login <= 1.9.16.3 - Login Page Disclosure
Medium
CVE-2024-32111
WordPress Core < 6.5.5 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-31111
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Template Part Block
Medium
CVE-2024-5284
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-5715
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via Member Edit
Medium
CVE-2024-3963
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers <= 1.12.13 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-4272
Support SVG <= 1.0.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG
Medium
CVE-2024-5281
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Affiliate Editing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.