Medium
CVE-2024-52493
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-10782
Theme Builder For Elementor <= 1.2.2 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10796
If-So Dynamic Content Personalization <= 1.9.2.1 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11371
Theater for WordPress <= 0.18.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-52492
Image horizontal reel scroll slideshow <= 13.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10785
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9542
Sky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template
Medium
CVE-2024-52495
Distance Based Shipping Calculator <= 2.0.23 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-52490
Pathomation <= 2.5.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-11438
StreamWeasels Online Status Bar <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11456
Run Contests, Raffles, and Giveaways with ContestsWP <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-52491
Sticky Social Icons <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10528
Ultimate Member <= 2.8.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Profile Picture Update
Medium
CVE-2024-10316
Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-52502
ImbaChat <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10054
Happyforms <= 1.26.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10665
Yaad Sarig Payment Gateway For WC <= 2.2.4 - Missing Authorization to Authenticated (Subscriber+) Log Read/Deletion
Medium
CVE-2024-10878
Sugar Calendar (Lite) <= 3.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11278
GD bbPress Attachments <= 4.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-11400
HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter
Medium
CVE-2024-11198
GD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter
Critical
CVE-2024-52476
Fediverse Embeds <= 1.5.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-10365
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Critical
CVE-2024-52475
Wawp < 3.0.18 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.