Medium
CVE-2024-10216
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-9223
WPDash Notes <= 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-10813
Product Table for WooCommerce by CodeAstrology (wooproducttable.com) <= 3.5.1 - Information Exposure
Medium
CVE-2024-10874
Quotes llama <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10869
GuardGiant Brute Force Protection <= 2.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-10868
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10886
Tribute Testimonials – WordPress Testimonial Grid/Slider <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-10961
Social Login <= 5.9.0 - Authentication Bypass via Disqus OAuth provider
Medium
CVE-2024-10116
Twitter Follow Button <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter
Critical
CVE-2024-9659
School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-53708
AI Quiz <= 1.1 - Missing Authorization
High
CVE-2024-11415
WP-Orphanage Extended <= 1.2 - Cross-Site Request Forgery to Orphan Account Privilege Escalation
Medium
CVE-2024-53713
Silverlight Video Player <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2024-11361
PDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-11426
AutoListicle: Automatically Update Numbered List Articles <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53718
Multi Feed Reader <= 2.2.4 - Cross-Site Request Forgery
High
CVE-2024-9941
WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-53719
Zajax – Ajax Navigation <= 0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-10606
WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
Medium
CVE-2024-53716
wp auto top <= 2.9.3 - Cross-Site Request Forgery
Medium
CVE-2024-53707
Ahmeti Wp Güzel Sözler <= 4.0 - Cross-Site Request Forgery
Medium
CVE-2024-53726
RealtyCandy IDX Broker Extended <= 1.5.1 - Cross-Site Request Forgery
Critical
CVE-2024-9511
FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection
Medium
CVE-2024-10537
WP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Authenticated (Subscriber+) User Meta Key Enumeration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.