Medium
CVE-2024-33930
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-33910
Digital Publications by Supsystic <= 1.7.7 - Missing Authorization
Medium
CVE-2024-0216
Google Doc Embedder <= 2.6.4 - Authenticated (Contributor+) Blind Server Side Request Forgery
Medium
CVE-2024-33936
Print-O-Matic <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1677
Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce <= 3.4.6 - Improper Authorization
Medium
CVE-2024-33934
Mini Loops <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2958
SVS Pricing Tables <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3942
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization
Medium
CVE-2024-1688
Woo Total Sales <= 3.1.4 - Missing Authorization to Unauthenticated Sales Report Retrieval
Medium
CVE-2024-1678
Subway – Private Site Option <= 2.1.4 - Improper Access Control to Sensitive Information Exposure via REST API
Medium
CVE-2024-33935
PB MailCrypt <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33931
JW Player for WordPress <= 2.3.3 - Missing Authorization
Medium
CVE-2024-3674
Inline Google Spreadsheet Viewer <= 0.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4203
Premium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33907
Print My Blog – Print, PDF, & eBook Converter WordPress Plugin <= 3.26.2 - Missing Authorization
Medium
CVE-2024-33915
Debug Log Manager <= 2.3.1 - Missing Authorization via toggle_debugging
Medium
CVE-2024-3071
ACF On-The-Go <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Update
Critical
CVE-2024-33911
School Management Pro <= 10.3.4 - Authenticated (School Admin+) SQL Injection
High
CVE-2024-1895
Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta
High
CVE-2024-1897
Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode
Medium
CVE-2024-33909
iPages Flipbook <= 1.5.1 - Missing Authorization
Medium
CVE-2024-3021
Mhr Post Ticker <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-33919
RomethemeKit For Elementor <= 1.4.1 - Missing Authorization
Medium
CVE-2024-33937
Progressive WordPress (PWA) <= 2.1.13 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.