Medium
CVE-2024-1769
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2023-6825
File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
Medium
CVE-2024-1381
Page Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure
High
CVE-2024-0825
Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-1088
Password Protected Store for WooCommerce <= 2.2 - Information Exposure via REST API
Medium
CVE-2024-1285
Page Builder Sandwich <= 5.1.0 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Post Editing
High
CVE-2024-1731
Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-0698
Easy!Appointments <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1095
Build & Control Block Patterns – Boost up Gutenberg Editor <= 1.3.5.4 - Missing Authorization
Medium
CVE-2024-1478
Maintenance Mode <= 3.0.1 - Information Exposure
Medium
CVE-2024-0839
FeedWordPress <= 2022.0222 - Insecure Direct Object Referece
Medium
CVE-2024-1782
Blue Triad EZAnalytics <= 1.0 - Reflected Cross-Site Scripting via 'bt_webid'
Medium
CVE-2024-1178
SportsPress – Sports Club & League Manager <= 2.7.17 - Missing Authorization to Unauthenticated Event Permalink Update
Medium
CVE-2024-1398
Ultimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-27949
Image Optimizer, Resizer and CDN – Sirv <= 7.2.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2024-1541
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1668
Avada <= 7.11.5 - Authenticated(Contributor+) Sensitive Information Exposure via Form Entries
Medium
CVE-2024-23501
Ebook Store <= 5.8001 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1449
Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0611
Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback
Medium
CVE-2024-1592
Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion
Medium
CVE-2024-1479
WP Show Posts <= 1.1.4 - Information Exposure
Medium
CVE-2024-1452
GenerateBlocks <= 1.8.2 - Sensitive Information Exposure
Medium
CVE-2023-6326
Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.