High
CVE-2024-31234
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-2402
Better Comments <= 1.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-2404
Better Comments <= 1.5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-6695
Beaver Themer <= 1.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode
Medium
CVE-2024-2868
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout
Medium
CVE-2024-1418
CGC Maintenance Mode <= 1.2 - Sensitive Information Exposure
Medium
CVE-2024-2830
WordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-7253
Import WP – Export and Import CSV and XML files to WordPress <= 2.13.0 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2024-2302
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposure
High
CVE-2024-3022
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-1756
WooCommerce Customers Manager <= 29.7 - Missing Authorization to Information Exposure
Medium
CVE-2024-3162
Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial
Medium
CVE-2024-0598
Gutenberg Blocks by Kadence Blocks <= 3.2.17 - Authenticated(Editor+) Stored Cross-Site Scripting via Contact Form Message Settings
Medium
CVE-2024-3062
Save as PDF by Pdfcrowd <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-2879
LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection
Medium
CVE-2024-1327
Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box
Medium
CVE-2024-31230
ShortPixel Adaptive Images <= 3.8.2 - Missing Authorization in activate_ai_handler and deactivate_ai_handler
Medium
CVE-2024-2925
Beaver Builder – WordPress Page Builder <= 2.8.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
Medium
CVE-2024-1946
Genesis Blocks <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Content
Medium
CVE-2024-2839
Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1807
Product Sort and Display for WooCommerce <= 2.4.1 - Missing Authorization
Medium
CVE-2024-2334
Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload
Medium
CVE-2024-1732
Sharkdropship for AliExpress Dropshipping and Affiliate <= 2.2.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-1504
SecuPress Free — WordPress Security <= 2.2.5.1 - Cross-Site Request Forgery to Banned IP Address
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.