Medium
CVE-2024-43118
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-43129
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43125
WP Table Builder – WordPress Table Plugin <= 1.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43149
CM Tooltip Glossary <= 4.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43165
WPSection <= 1.3.8 - Authenticated (Contributor+) Local File Inlcusion
Medium
CVE-2024-5668
Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.28 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes
Medium
CVE-2024-43158
Masteriyo - LMS <= 1.11.4 - Missing Authorization
Medium
CVE-2024-7590
Spectra – WordPress Gutenberg Blocks <= 2.15.0 - Authenticated (Contributor+) Stored Cross-site Scripting
Medium
CVE-2024-43161
Depicter Slider <= 3.1.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43126
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-43150
Xpro Elementor Addons <= 1.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43154
Advanced Cron Manager – debug & control <= 2.5.9 - Missing Authorization
Medium
CVE-2024-43147
Selection Lite <= 1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-43145
GeoDirectory <= 2.3.61 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-43138
Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-43140
Ultimate Bootstrap Elements for Elementor <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43116
Simple Local Avatars <= 2.7.10 - Cross-Site Request Forgery via save_default_avatar_file_id()
Medium
CVE-2024-43128
WooCommerce Product Table Lite <= 3.5.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-43137
WappPress <= 6.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-43144
Cost Calculator Builder <= 3.2.15 - Unauthenticated SQL Injection
Critical
CVE-2024-43160
BerqWP <= 1.7.6 - Unauthenticated Arbitrary File Uplaod
Critical
CVE-2024-6926
Viral Signup <= 2.1 - Unauthenticated SQL Injection
Medium
CVE-2024-43136
Sunshine Photo Cart <= 3.2.1 - Missing Authorization
Medium
CVE-2024-6987
Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.