Medium
CVE-2024-9347
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-9352
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Custom Form Creation
Critical
CVE-2024-9263
WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover
Medium
CVE-2024-9951
Wordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scripting
High
CVE-2024-9861
Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass
Medium
CVE-2024-8921
Zita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9444
ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9937
Woo Manage Fraud Orders <= 2.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-8541
Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons <= 2.6.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-49306
WP Content Copy Protection & No Right Click <= 3.5.9 - Cross-Site Request Forgery
Medium
CVE-2024-49320
Encyclopedia / Glossary / Wiki <= 1.7.60 - Reflected Cross-Site Scripting
High
CVE-2024-49317
Point Maker <= 0.1.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-49309
Digitally <= 1.0.8 - Reflected Cross-Site Scripting
Critical
CVE-2024-49314
JiangQie Free Mini Program <= 2.5.2 - Unauthenticated Arbitrary File Uplaod
Medium
CVE-2024-43300
Movie Database <= 1.0.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-49308
Animator <= 3.0.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-49321
Simple Custom Post Order <= 2.5.7 - Missing Authorization
High
CVE-2024-8507
File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-49298
PeproDev Ultimate Invoice <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49278
Omnipress <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49288
Email Template Customizer for WooCommerce <= 1.2.9.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Critical
CVE-2024-9105
UltimateAI <= 2.8.3 - Authentication Bypass
Medium
CVE-2024-9689
Post From Frontend <= 1.0.0 - Cross-Site Request Forgery to Arbitrary Post Deletion
Medium
CVE-2024-9888
ElementInvader Addons for Elementor <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.