Medium
CVE-2024-4759
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-2368
Mollie Forms <= 2.6.13 - Cross-Site Request Forgery to Arbitrary Post Duplication
Medium
CVE-2024-5317
Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1
Medium
CVE-2024-5459
Restaurant Menu and Food Ordering <= 2.4.16 - Missing Authorization to Menu Creation
Medium
CVE-2024-5485
SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! <= 1.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trigger Link Shortcode
Medium
CVE-2024-3031
Fluid Notification Bar <= 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4462
Nafeza Prayer Time <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-3555
Social Link Pages: link-in-bio landing pages for your social media profiles <= 1.6.9 - Missing Authorization to Arbitrary Page Creation and Cross-Site Scripting
High
CVE-2024-2019
WP-DB-Table-Editor <= 1.8.4 - Missing Authorization to Authenticated(Contributor+) Database Access
Medium
CVE-2024-1718
Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update
Medium
CVE-2024-4697
Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via heading_tag Parameter
Medium
CVE-2024-2382
Authorize.net Payment Gateway For WooCommerce <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass
Medium
CVE-2024-1717
Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
Medium
CVE-2024-4997
WPUpper Share Buttons <= 3.43 - Missing Authorization
Medium
CVE-2024-4274
Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion
Medium
CVE-2024-4273
Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-3230
Download Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35671
MJ Update History <= 1.0.4 - Missing Authorization
Critical
CVE-2024-4552
Social Login Lite For WooCommerce <= 1.6.0 - Authentication Bypass
Medium
CVE-2024-35657
WP-Recall <= 16.26.6 - Cross-Site Request Forgery
High
CVE-2024-4870
Frontend Registration – Contact Form 7 <= 5.1 - Authenticated (Editor+) Privilege Escalation
Medium
CVE-2024-35664
WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting
Medium
CVE-2024-35652
Event Tickets with Ticket Scanner <= 2.3.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-35658
Checkout Field Editor for WooCommerce (Pro) <= 3.6.2 - Unauthenticated Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.