Medium
CVE-2024-30233
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2023-6799
WP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomness
High
CVE-2024-1990
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Critical
CVE-2024-30240
Calendarista <= 15.5.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-2261
Event Tickets and Registration <= 5.8.2 - Improper Authorization to Information Disclosure
Critical
CVE-2024-30238
Photos and Files Contest Gallery <= 21.3.2 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-30242
Contact Form to Any API <= 1.1.8 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-30237
Slider by Supsystic <= 1.8.10 - Authenticated (Admin+) SQL Injection
High
CVE-2024-30244
Church Admin <= 4.0.27 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-29794
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-29770
Shortlinks by Pretty Links <= 3.6.2 - Reflected Cross-Site Scripting via post_status
Critical
CVE-2024-0399
WooCommerce Customers Manager <= 29.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-2871
Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-2326
Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2024-2112
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information Exposure
High
CVE-2024-1893
Easy Property Listings <= 3.5.2 - Authenticated(Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-2080
LiquidPoll – Polls, Surveys, NPS and Feedback Reviews <= 3.3.76 - Information Exposure
Critical
CVE-2024-2804
Network Summary <= 2.0.11 - Unauthenticated SQL Injection
High
CVE-2024-2341
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-2344
Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry
Medium
CVE-2024-2340
Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing
High
CVE-2024-2342
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode
Critical
CVE-2024-1711
Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id'
High
CVE-2024-1799
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.