Medium
CVE-2024-7418
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-1056
Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post
Medium
CVE-2024-43985
Bus Ticket Booking with Seat Reservation <= 5.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-7895
Beaver Builder (Lite Version) <= 2.8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter
High
CVE-2024-7607
Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection
Medium
CVE-2024-5987
WP Accessibility Helper <= 0.6.2.8 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
Medium
CVE-2024-7857
Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injection
Medium
CVE-2024-3679
Premium SEO Pack – WP SEO Plugin <= 1.6.002 - Unauthenticated Information Exposure
Medium
CVE-2024-3944
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments
Medium
CVE-2024-43977
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-43980
Fota WP <= 1.4.1 - Missing Authorization via fotawp_install_and_activate_plugins()
Critical
CVE-2024-43978
Super Store Finder <= 6.9.7 - Unauthenticated SQL Injection
Medium
CVE-2024-43999
Ninja Forms <= 3.8.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-2440
Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization
High
CVE-2024-43982
Login As Users <= 1.4.3 - Missing Authorization to Privielge Escalation via Account Takeover
Medium
CVE-2024-43971
Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-43983
Podlove Podcast Publisher <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43973
GetPaid <= 2.8.11 - Missing Authorization via column_subscription()
Medium
CVE-2024-43979
Blockbooster <= 1.0.10 - Missing Authorization
Medium
CVE-2024-5857
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion
High
CVE-2024-43975
Super Store Finder <= 6.9.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-43970
SureCart <= 2.29.3 - Reflected Cross-Site Scripting
High
CVE-2024-7856
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2024-6551
GiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.