Medium
CVE-2024-6547
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-6634
Master Currency WP <= 1.1.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via Currency Converter Form Shortcode
Medium
CVE-2024-6458
WooCommerce Product Table Lite <= 3.5.1 - Missing Authorization to (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-6569
Campaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path Disclosure
Critical
CVE-2024-6460
Grow by Tradedoubler <= 2.0.21 - Unauthenticated Local File Inclusion
Medium
CVE-2024-6703
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields
High
CVE-2024-6431
Media.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-5614
Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1804
Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_import_from_xml
Medium
CVE-2024-4410
IgnitionDeck Crowdfunding Platform <= 1.9.8 - Missing Authorization
Medium
CVE-2024-3896
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Title
Medium
CVE-2024-39635
Youzify <= 1.2.6 - Missing Authorization
High
CVE-2024-39634
PowerPack Pro for Elementor <= 2.10.14 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2024-39628
Ninja Forms <= 3.8.6 - Cross-Site Request Forgery
High
CVE-2024-6589
LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-39633
PowerPack for Beaver Builder <= 2.33.0 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2024-39631
Contest Gallery <= 23.1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-6896
AMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-6931
The Events Calendar <= 6.6.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-6930
WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode
Medium
CVE-2024-6629
All-in-One Video Gallery <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode
Medium
CVE-2024-6755
Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-6836
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+) Settings Update
Medium
CVE-2024-6751
Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.