Medium
CVE-2024-10770
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-51868
DuoGeek Blocks 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51870
Ultimate Flipbox Addon for Elementor 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-51791
Forms <= 2.8.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-51821
WE – Client Logo Carousel <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51903
WP Listings Pro <= 3.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51936
ESB Testimonials <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24538
BuddyPress Groups Extras <= 3.6.10 - Cross-Site Request Forgery
Medium
CVE-2024-51874
ParOne Feeds <= 1.17.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51940
WP Responsive Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51860
Custom Dashboard Widget <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10325
Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10187
myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
Medium
CVE-2024-10269
Easy SVG Support <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10621
Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-10473
Logo Slider <= 4.1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-10896
Logo Slider <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10493
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10510
adBuddy+ (AdBlocker Detection) by NetfunkDesign <= 1.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8442
Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget
Medium
CVE-2024-10186
Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode
Medium
CVE-2024-10168
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode
Medium
CVE-2024-8323
Pricing Tables WordPress Plugin – Easy Pricing Tables <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fontFamily Attribute
Critical
CVE-2024-8614
WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.