High
CVE-2024-2102
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-2091
Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50374
CMP – Coming Soon & Maintenance <= 4.1.10 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2024-30230
PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2024-2954
WordPress Action Network 1.4.3 -Authentcated (Admin+) SQL Injection
Medium
CVE-2024-30235
Multiple Page Generator Plugin – MPG <= 3.4.0 - Missing Authorization via mpg_get_log_by_project_id
High
CVE-2024-1983
Simple Ajax Chat <= 20240216 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-23500
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.19 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2024-1521
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload
Medium
CVE-2024-25599
Seriously Simple Podcasting <= 3.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-2093
VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure
Critical
CVE-2024-30239
Zoho Campaigns <= 2.0.6 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-2120
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation
Medium
CVE-2024-2203
The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget
Critical
CVE-2024-30224
WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) <= 1.3.2 - Unauthenticated PHP Object Injection
Medium
CVE-2024-29810
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'thumb_url'
Medium
CVE-2024-2117
Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget
High
CVE-2024-30231
Product Import Export for WooCommerce <= 2.4.1 - Authenticated(Shop Manager+) Arbitrary File Upload
Critical
CVE-2024-30245
DecaLog <= 3.9.0 - Authenticated (Admin+) SQL injection
High
CVE-2024-2890
Tumult Hype Animations <= 1.9.12 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2024-2951
RegistrationMagic <= 5.3.0.0 - Cross-Site Request Forgery
Medium
CVE-2024-30232
Exclusive Addons Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-22300
Email Subscribers & Newsletters <= 5.7.11 - Reflected Cross-Site Scripting via campaign_id
High
CVE-2024-30222
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.26 - Authenticated (Contributor+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.