Medium
CVE-2024-31387
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-2765
Ultimate Member <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-31934
Link Whisper Free <= 0.6.9
Medium
CVE-2024-31378
MailChimp Forms by MailMunch <= 3.2.1 - Cross-Site Request Forgery
Medium
CVE-2024-31926
Advanced Cron Manager – debug & control <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31421
Popup by Supsystic <= 1.10.27 - Missing Authorization
Medium
CVE-2024-31921
Ultimate Product Catalogue <= 5.2.15 - Cross-Site Request Forgery via reset_settings()
Medium
CVE-2024-3343
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
Medium
CVE-2024-31379
Smash Balloon Social Post Feed <= 4.2.1 - Cross-Site Request Forgery
Medium
CVE-2024-31935
Simple Post Notes <= 1.7.6 - Cross-Site Request Forgery
Medium
CVE-2024-31937
TWIPLA (Visitor Analytics IO) <= 1.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31373
e2pdf <= 1.20.27 - Cross-Site Request Forgery
Medium
CVE-2024-31434
Newsletter <= 8.0.6 - Cross-Site Request Forgery
Medium
CVE-2024-31927
WP Login and Logout Redirect <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31936
UsersWP <= 1.2.4 - Cross-Site Request Forgery
Medium
CVE-2024-31385
ReDi Restaurant Reservation <= 24.0128 - Cross-Site Request Forgery via redi_restaurant_admin_options_page()
Medium
CVE-2024-31928
Top Bar <= 3.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31432
Restrict Content <= 3.2.8 - Missing Authorization
Medium
CVE-2024-31932
Blocksy Companion <= 2.0.28 - Cross-Site Request Forgery
Medium
CVE-2024-2966
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search
Medium
CVE-2024-31424
Login with phone number <= 1.6.93 - Cross-Site Request Forgery
Medium
CVE-2024-0710
GP Unique ID <= 1.5.5 - Unauthenticated Form Submission Unique ID Modification
Medium
CVE-2024-31381
Spotlight Social Media Feeds <= 1.6.10 - Cross-Site Request Forgery
Medium
CVE-2024-31925
F4 Improvements <= 1.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.