Medium
CVE-2024-12506
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-11774
Outdooractive Embed <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9619
WP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-11784
Sell Tickets Online – TicketSource Ticket Shop for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12509
Embed Twine <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11775
Particle Background <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11783
Financial Calculator <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11812
Wtyczka SeoPilot dla WP <= 3.3.091 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-11411
Spotlightr <= 0.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-56159
Astro's server source code is exposed to the public if sourcemaps are enabled
Medium
CVE-2024-11776
PCRecruiter Extensions <= 1.4.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56231
SaasPricing <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56227
Royal Elementor Addons <= 1.7.1001 - Missing Authorization
Medium
CVE-2024-12731
Aklamator INfeed <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56222
CodeBard Help Desk <= 1.1.1 - Cross-Site Request Forgery
High
CVE-2024-56213
Eventin <= 4.0.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-54346
Barter <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-56220
SSL Wireless SMS Notification <= 3.6.0 - Unauthenticated Privilege Escalation
Medium
CVE-2024-56232
WP Nice Loader <= 0.1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-56219
Widget Options <= 4.0.6.1 - Missing Authorization
Medium
CVE-2024-11806
PKT1 Centro de envios <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-56218
Contact Form 7 Dynamic Text Extension <= 5.0.1 - Cross-Site Request Forgery
High
CVE-2024-56216
Themify Builder <= 7.6.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-56221
WPMozo Addons Lite for Elementor <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.