Medium
CVE-2024-56255
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-56241
WPKoi Templates for Elementor <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56254
Move Addons for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56244
Ashe Extra <= 1.2.92 - Missing Authorization
Medium
CVE-2024-56250
Just Writing Statistics <= 4.7 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-56267
Interactive UK Map <= 3.4.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-56302
ConvertCalculator for WordPress <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56240
Pronamic Google Maps <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24624
HT Event <= 1.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-56268
Post Grid Elementor Addon <= 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56236
Hestia Nginx Cache <= 2.4.0 - Missing Authorization
Medium
CVE-2024-56239
Themify Audio Dock <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-24620
Best WordPress Shortcode Plugin in 2025 – AIO Shortcodes <= 1.3.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-24626
Music Store – WordPress eCommerce <= 1.1.19 - Reflected Cross-Site Scripting
Medium
CVE-2024-56237
Contest Gallery <= 24.0.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-56257
Coins MarketCap <= 5.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56253
Data Tables Generator by Supsystic <= 1.10.36 - Missing Authorization
Medium
CVE-2024-56263
GS Shots for Dribbble <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56252
Enter Addons <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56261
Project Showcase <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24614
Post Timeline <= 2.3.9 - Reflected Cross-Site Scripting
High
CVE-2025-24612
Shipping for Nova Poshta plugin for WordPress <= 1.19.6 - Unauthenticated SQL Injection
Medium
CVE-2025-24615
Analytics Cat <= 1.1.2 - Reflected Cross-Site Scripting
Low
CVE-2024-56512
Apache NiFi: Missing Complete Authorization for Parameter and Service References
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.