Critical
CVE-2024-10508
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-51865
Simple Social Share Block <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10667
Content Slider Block – Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-52358
Responsive Addons for Elementor <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-52348
AA Audio Player <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-10589
Leopard <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2024-51914
drop in image slideshow gallery <= 12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51930
Custom URL Shortener <= 0.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51886
Posts Filter <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8756
Quform - WordPress Form Builder <= 2.20.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-52351
BU Slideshow <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51824
Advanced Video Player with Analytics <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51828
Beacon For Help Scout <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51798
Surbma | Font Awesome <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-10674
Th Shop Mania <= 1.4.9 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Medium
CVE-2024-51892
Sell Media File with Stripe <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51847
WP PagSeguro Payments <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51938
Charity Addon for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51924
WP Agenda <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51833
Easy Social Sharebar <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51840
Wd-image-magnifier-xoss <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-52345
ra_qrcode <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51926
GreenCon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51909
audioCase <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.