Medium
CVE-2024-49221
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-49228
bVerse Convert <= 1.3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-49227
Free Stock Photos Foter <= 1.5.4 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-49238
ADIF Log Search Widget <= 1.0f - Reflected Cross-Site Scripting
Medium
CVE-2024-49272
Social Auto Poster <= 5.3.15 - Cross-Site Request Forgery
Critical
CVE-2024-49216
Feed Comments Number <= 0.2.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-49223
CJ Change Howdy <= 3.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2024-49247
BuddyPress Better Registration <= 1.6 - Authentication Bypass to Administrator
High
CVE-2024-49226
TAKETIN To WP Membership <= 2.8.12 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-49231
WordPress Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49265
Booking.com Banner Creator <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49230
Ajax Custom CSS/JS <= 2.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-49248
Ad Inserter <= 2.7.37 - Reflected Cross-Site Scripting
Medium
CVE-2024-49267
Unlimited Addon For Elementor <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49233
MAS Elementor <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-49219
RS-Members <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-9926
Jetpack < 13.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure
Medium
CVE-2024-49236
Crazy Call To Action Box <= 1.05 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49237
Ahmeti Wp Timeline <= 5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-49225
wpPricing Builder <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-49246
Ajax Rating with Custom Login <= 1.1 - Unauthenticated SQL Injection
Critical
CVE-2024-49218
Recently <= 1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-49232
El mejor Cluster <= 1.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49266
WP-Spreadplugin <= 4.8.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.