Medium
CVE-2024-4900
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-35665
Insert Post Ads <= 1.3.2 - Missing Authorization
Medium
CVE-2024-4581
Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes
Medium
CVE-2024-35659
KiviCare <= 3.6.6 - Authenticated (Patient+) Insecure Direct Object Reference
Medium
CVE-2024-6335
Tracking Code Manager <= 2.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-35648
Emergency Password Reset <= 8.0 - Cross-Site Request Forgery
Medium
CVE-2024-35650
MelaPress Login Security <= 1.3.0 - Authenticated (Admin+) Remote File Inclusion
Medium
CVE-2024-35660
Master Addons for Elementor <= 2.0.5.4.1 - Missing Authorization via get_jltma_save_menuitem_settings()
Medium
CVE-2024-35653
Visual Composer Website Builder <= 45.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-35668
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.77 - Reflected Cross-Site Scripting
Medium
CVE-2024-35667
WP EasyCart <= 5.5.19 - Missing Authorization
Medium
CVE-2024-35654
Responsive <= 5.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35661
Upload Fields for WPForms <= 1.0.2 - Missing Authorization
Medium
CVE-2024-3888
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
Medium
CVE-2024-4637
Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex
Medium
CVE-2024-35662
Simple COD Fees for WooCommerce <= 2.0.2 - Missing Authorization
Medium
CVE-2024-4899
SEOPress <= 7.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35655
Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content <= 0.6.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-35663
WP Translate <= 5.3.0 - Missing Authorization
Medium
CVE-2024-35649
Save as PDF Plugin by Pdfcrowd <= 3.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35669
Debug Log Manager <= 2.3.1 - Missing Authorization
Medium
CVE-2024-35670
Integrate Google Drive <= 1.3.93 - Missing Authorization
Medium
CVE-2024-4344
Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery
Medium
CVE-2024-6478
CTT Expresso para WooCommerce <= 3.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.