Medium
CVE-2024-54211
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-54213
WordPress Page Builder – Zion Builder <= 3.6.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9694
CMSMasters Elementor Addon <= 1.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2024-53797
Beaver Builder <= 2.8.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11461
Form Data Collector <= 2.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-54207
WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-11372
Connexion Logs <= 3.0.2 - Authenticated (Admin+) SQL Injection
High
CVE-2024-53805
WP Mailster <= 1.8.16.0 - Missing Authorization
Critical
CVE-2024-54214
Revy <= 1.18 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-53808
NEX-Forms – Ultimate Form Builder <= 8.7.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-53826
WPCasa <= 1.2.13 - Insecure Direct Object Reference
Medium
CVE-2024-11898
Scratch & Win – Giveaways and Contests <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53813
WP Travel <= 9.6.0 - Missing Authorization
Medium
CVE-2024-53806
Maspik – Spam blacklist <= 2.2.7 - Cross-Site Request Forgery to Plugin Settings Change
Medium
CVE-2024-11707
My auctions allegro <= 3.6.17 - Reflected Cross-Site Scripting
High
CVE-2024-54215
Revy <= 1.18 - Unauthenticated SQL Injection
Medium
CVE-2024-54210
Advanced Element Bucket Addons for Elementor <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11866
BMLT Tabbed Map <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53801
Bold Page Builder <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11453
WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53802
Futurio Extra <= 2.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_size tag
Medium
CVE-2024-9058
Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget
Medium
CVE-2024-54218
AIO Contact <= 2.8.1 - Missing Authorization
Medium
CVE-2024-53819
Client Invoicing by Sprout Invoices <= 20.8.0 - Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.