Medium
CVE-2024-10880
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-10034
Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.4.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-11225
Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg
Medium
CVE-2024-10666
Easy Twitter Feed – Twitter feeds plugin for WP <= 1.2.6 - Authenticated (Contributor+) Post Exposure
Medium
CVE-2024-11355
Ultimate YouTube Video & Shorts Player With Vimeo <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Setting Exposure
Medium
CVE-2024-10499
AI Engine <= 2.6.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-8735
MailMunch – Grow your Email List <= 3.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-9881
LearnPress <= 4.2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10518
ProfilePress <= 4.15.14 - Authenticated (Admin+) Stored Cross-Site Scripting via "Product Files"
Medium
CVE-2024-10637
Kadence Blocks <= 3.2.53 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10517
ProfilePress <= 4.15.14 - Authenticated (Admin+) Stored Cross-Site Scripting via "Labels"
Medium
CVE-2024-9641
LuckyWP Table of Contents <= 2.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10010
LearnPress <= 4.2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9428
Popup Builder <= 4.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-11601
Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.1 - Cross-Site Request Forgery to Limited Arbitrary Options Update
Medium
CVE-2024-12581
Kadence Blocks <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-11104
Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Medium
CVE-2024-11381
Control horas <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10568
Ajax Search Lite <= 4.12.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10890
WPAdverts – Classifieds Plugin <= 2.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-11334
My Contador lesr <= 2.0 - Missing Authorization to Unauthenticated User Registration CSV Export
High
CVE-2024-10788
Activity Log – Monitor & Record User Changes <= 2.11.1 - Unauthenticated Stored Cross-Site Scripting via Event Context
Medium
CVE-2024-10177
Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via beds24-link Shortcode
Medium
CVE-2024-10172
WPBakery Visual Composer WHMCS Elements <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via void_wbwhmcse_laouts_search Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.