Medium
CVE-2024-52600
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-10878
Sugar Calendar (Lite) <= 3.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11278
GD bbPress Attachments <= 4.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-31141
Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider
Medium
CVE-2024-11400
HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter
Medium
CVE-2024-11198
GD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter
Critical
CVE-2024-52476
Fediverse Embeds <= 1.5.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-10365
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Critical
CVE-2024-52475
Wawp < 3.0.18 - Unauthenticated Privilege Escalation
High
CVE-2024-10855
Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion
High
CVE-2024-10899
WooCommerce Product Table Lite <= 3.8.6 - Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting
Medium
CVE-2024-11154
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-52487
Ultimate Classified Listings <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-9239
Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-11179
MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-8726
MailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-52484
Wc Recently viewed products <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-10900
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion
Medium
CVE-2024-52486
Elementor Portfolio Builder <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-52477
Document & Data Automation <= 1.6.1 - Cross-Site Request Forgery
Medium
CVE-2024-10872
Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-52474
Express Payments Module <= 1.1.8 - Unauthenticated SQL Injection via type_id
Medium
CVE-2024-52478
Jobify - Job Board WordPress Theme < 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10708
System Dashboard <= 2.8.14 - Authenticated (Admin+) Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.