Medium
CVE-2024-53712
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-11332
HIPAA Compliant Forms with Drag’n’Drop HIPAA Form Builder. Sign HIPAA documents <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11620
Rank Math SEO <= 1.0.231 - .htaccess File Manipulation to Remote Code Execution
Medium
CVE-2024-53710
ITERAS <= 1.8.0 - Cross-Site Request Forgery
Medium
CVE-2024-11387
Easy Liveblogs <= 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11362
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.112.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11408
Slotti Ajanvaraus <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53725
Post Hits Counter <= 2.8.23 - Reflected Cross-Site Scripting
Medium
CVE-2024-53714
Continue Shopping From Cart <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-53723
Google Plus Share and +1 Button <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2024-53711
Hotlink2Watermark <= 0.3.2 - Cross-Site Request Forgery
Medium
CVE-2024-53720
WP-ISPConfig 3 <= 1.5.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-10873
LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-10631
Countdown Timer <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53724
IceStats <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2024-53715
Simple Travel Map <= 0.1 - Cross-Site Request Forgery
Medium
CVE-2024-53709
Generic Elements <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53721
Advanced Event Manager <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-10803
MP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download
Medium
CVE-2024-10939
Image Widget <= 4.4.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-53717
yPHPlista <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-10678
Ultimate Blocks <= 3.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-9660
School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload
Medium
CVE-2024-53722
Favicon My Blog <= 1.0.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.