Medium
CVE-2024-44061
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-43994
Kahuna <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44052
HelloAsso <= 1.1.10 - Missing Authorization
Medium
CVE-2024-44060
Filmix <= 1.1 - Reflected Cross-Site Scripting
High
CVE-2024-5784
Tutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-44053
Opor Ayam <= 1.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-43988
Mystique <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43993
Liquido <= 1.0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44054
Fluida <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8274
WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-44064
Like Button Rating <= 2.6.53 - Cross-Site Request Forgery
Medium
CVE-2024-44063
Happyforms <= 1.26.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-43995
Posterity <= 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44001
Royal Elementor Addons <= 1.3.982 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44059
Custom Query Blocks <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43987
Sliding Door <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-8016
The Events Calendar Pro <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution
Medium
CVE-2024-44057
Nirvana <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43992
LatePoint <= 4.9.91 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-43989
Justified Image Grid <= 4.6.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-8319
Tourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple Functions
Medium
CVE-2024-43998
Blogpoet <= 1.0.2 - Missing Authorization via blogpoet_install_and_activate_plugins()
Medium
CVE-2024-2541
Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File
Medium
CVE-2024-1384
Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.