Medium
CVE-2024-4758
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2024-35677
MegaMenu <= 2.3.12 - Unauthenticated Local File Inclusion
Medium
CVE-2024-4957
Frontend Checklist <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-2017
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-4959
Frontend Checklist <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Items
Medium
CVE-2024-35675
Advanced Woo Labels – Product Labels for WooCommerce <= 1.93 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-35678
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress <= 1.7.2 - Authenticated (Author+) SQL Injection
Medium
CVE-2024-35673
Pure Chat – Live Chat Plugin & More! <= 2.22 - Cross-Site Request Forgery
Medium
CVE-2024-6718
PVN Auth Popup <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5071
Bookster – WordPress Appointment Booking Plugin <= 1.1.0 - Unauthenticated Appointment Manipulation
Medium
CVE-2024-35674
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2024-35676
Recurring PayPal Donations <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4704
Contact Form 7 <= 5.9.4 - Unauthenticated Open Redirect
High
CVE-2023-6966
The Moneytizer <= 9.6.3 - Missing Authorization via multiple AJAX actions
Medium
CVE-2024-3633
WebP & SVG Support <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-5188
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6712
MapFig Studio <= 0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-4194
Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-6713
PVN Auth Popup <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-6956
EasyAzon – Amazon Associates Affiliate Plugin <= 5.1.0 - Reflected Cross-Site Scripting via easyazon-cloaking-locale
Medium
CVE-2024-5573
Easy Table of Contents <= 2.0.65 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-6668
ProfilePro <= 1.3 - Authenticated (Subscriber+) Stored Cross Site Scripting
Medium
CVE-2024-5169
Video Widget <= 1.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5199
Spotify Play Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.