Medium
CVE-2024-0838
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-0561
Ultimate Posts Widget <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1389
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return
Critical
CVE-2024-25600
Bricks <= 1.9.6 - Unauthenticated Remote Code Execution
Medium
CVE-2024-1273
Starbox <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1282
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-0438
Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1390
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page
Medium
CVE-2024-1058
SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1171
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Medium
CVE-2024-1172
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion
Critical
CVE-2024-25911
MoveTo <= 6.2 - Unauthenticated Directory Traversal to Arbitrary File Deletion
Medium
CVE-2024-25099
Paytium: Mollie payment forms & donations <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-1159
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
Medium
CVE-2024-1157
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
Medium
CVE-2024-25595
Defender Security <= 4.4.1 - IP Address Spoofing
High
CVE-2024-25095
Easy Forms for Mailchimp <= 6.8.10 - Sensitive Information Exposure via logfile
Medium
CVE-2024-1294
Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice
Medium
CVE-2024-25907
WP Media folder <= 5.7.2 - Missing Authorization to Authenticated(Subscriber+) Plugin settings change
Medium
CVE-2024-25593
NEX-Forms – Ultimate Form Builder <= 8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Critical
CVE-2024-25910
MoveTo <= 6.2 - Unauthenticated SQL Injection
Medium
CVE-2024-1054
Booster for WooCommerce <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-25903
Frontend File Manager <= 22.7 - Sensitive Information Exposure via user uploads
Medium
CVE-2024-25902
Malware Scanner <= 4.7.2 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.