High
CVE-2024-4477
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-2295
Contact Form Manager <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3565
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode
Medium
CVE-2024-4382
CB (legacy) <= 0.9.4.18 - Cross-Site Request Forgery to Code/Timeframe/Booking Deletion
Medium
CVE-2024-5347
Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget
Medium
CVE-2024-4160
Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode
Medium
CVE-2024-5427
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode
Medium
CVE-2024-4376
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Medium
CVE-2024-4379
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip
Medium
CVE-2024-5418
DethemeKit For Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slitems Attribute
High
CVE-2024-5345
Responsive Owl Carousel for Elementor <= 1.2.0 - Local File Inclusion
Medium
CVE-2024-35641
Just Writing Statistics <= 4.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5041
Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion
Medium
CVE-2024-35637
Church Admin <= 4.3.6 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2023-7073
Auto Featured Image (Auto Post Thumbnail) <= 4.1.7 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2024-35647
Global Notification Bar <= 1.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4565
Advanced Custom Fields <= 6.2.10 - Authenticated (Contributor+) Arbitrary Custom Field Access
Medium
CVE-2024-35638
ActiveDEMAND <= 0.2.43 - Cross-Site Request Forgery
Medium
CVE-2024-35633
Blocksy Companion <= 2.0.42 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2024-2793
Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.30 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-35646
Smartarget Message Bar <= 1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-35640
Safety Exit <= 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-35644
Preferred Languages <= 2.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5475
Responsive video embed <= 0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.