Medium
CVE-2024-11224
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-9777
Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameter
Medium
CVE-2024-9830
Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameter
High
CVE-2024-11038
WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form
High
CVE-2024-11036
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings
Medium
CVE-2024-11195
Email Subscription Popup <= 1.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcode
Medium
CVE-2024-10268
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
Medium
CVE-2024-11098
SVG Block <= 1.1.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10486
Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File
Medium
CVE-2024-52459
Chameleoni Jobs <= 2.5.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-52465
LGPD Framework <= 2.0.2 - Reflected Cross-Site Scripting
High
CVE-2024-52445
QRMenu Restaurant QR Menu Lite <= 1.0.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-52456
Awesome Studio <= 2.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-9651
Fluent Forms <= 5.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-52473
HTML5 Lyrics Karaoke Player <= 2.4 - Reflected Cross-Site Scripting
Critical
CVE-2024-52444
Opal Woo Custom Product Variation <= 1.1.3 - Unauthenticated Arbitrary File Deletion
High
CVE-2024-52451
Post Ideas <= 2 - Unauthenticated SQL Injection
Medium
CVE-2024-52454
GoQMieruca <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-52479
Jobify - Job Board WordPress Theme < 4.3.0 - Cross-Site Request Forgery
Critical
CVE-2024-52443
Geolocator <= 1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-52458
TM Islamic Helper <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-52455
GoQSmile <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-52469
WooCommerce Price Alert <= 1.0.4 - Reflected Cross-Site Scripting
Critical
CVE-2024-52440
Xpresslane Fast Checkout <= 1.0.0 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.