Medium
CVE-2024-51862
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-51864
Shortcode Collection <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51810
Lewe Bootstrap Visuals <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-10625
WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-51839
Utech Spinning Earth <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-52356
The Pack Elementor addons <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51813
Anant Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51816
Banner System <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51841
File Select Control For Elementor <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51817
Combo WP Rewrite Slugs <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Medium
CVE-2024-51826
Bitcoin Payments <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51807
AgendaPress – Easily Publish Meeting Agendas and Programs on WordPress <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-52344
Provide Forex Signals <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51896
Magic Slider <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-10640
The FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-51795
Pdf Embedder Fay <= 1.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10294
CE21 Suite <= 2.2.0 - Missing Authorization to Unauthenticated Plugin Settings Change
Medium
CVE-2024-51811
Popup Image <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51883
I Plant A Tree <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51880
BeBetter Social Icons <= 2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51867
Simpul Events by Esotech <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51802
Lead capture, gated content & newsletter opt-ins <= 7.4.857 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51873
Multi-day Booking Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51907
WP Virtual Room Configurator <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.