Medium
CVE-2024-4633
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-9872
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-11289
Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion
Medium
CVE-2024-10903
Broken Link Checker <= 2.4.1 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2024-11729
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-11450
ONLYOFFICE Docs <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54223
ARForms Form Builder <= 1.7.1 - HTML Injection
Medium
CVE-2024-54247
ABCBiz Addons for Elementor <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54257
Tydskrif <= 1.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-54230
Unlock Addons for Elementor <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-54234
Limit Login Attempts <= 5.5 - Unauthenticated SQL Injeciton
Medium
CVE-2024-11276
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting
Medium
CVE-2024-11336
Clickbank WordPress Plugin (Storefront) <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-11223
WPForms <= 1.9.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-11728
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection
Medium
CVE-2024-54226
Country Blocker <= 3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-9866
Event Tickets with Ticket Scanner <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-54235
Shiptimize for WooCommerce <= 3.1.86 - Reflected Cross-Site Scripting
High
CVE-2024-10516
Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
High
CVE-2024-54225
Designer <= 1.4.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-54236
Ni WooCommerce Bulk Product Editor <= 1.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-10849
NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54231
Ni WooCommerce Order Export <= 3.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-11730
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.