Medium
CVE-2024-47321
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-47307
Meta slider and carousel with lightbox <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-47322
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-47312
Classic Editor and Classic Widgets <= 1.4.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-47302
Fluent Support <= 1.8.0 - Insufficient Authorization on Email Verification
Medium
CVE-2024-47303
Livemesh Addons for Elementor <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8546
ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget
Medium
CVE-2024-8858
Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter
Medium
CVE-2024-9169
litespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-38809
Spring Framework DoS via conditional HTTP request
High
CVE-2024-8290
WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Privilege Escalation
Critical
CVE-2024-7385
WordPress Simple HTML Sitemap <= 3.1 - Authenticated (Admin+) SQL Injection
Low
CVE-2024-8350
Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add
Medium
CVE-2024-8549
Simple Calendar – Google Calendar Plugin <= 3.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9027
WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode
Critical
CVE-2024-8485
REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover
High
CVE-2024-8484
REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection
Medium
CVE-2024-9073
GutenGeek Free Gutenberg Blocks for WordPress <= 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9068
OneElements – Best Elementor Addons <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-6590
Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
High
CVE-2024-8481
Special Text Boxes <= 6.2.4 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-8713
Kodex Posts likes <= 2.5.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9069
Graphicsly – The ultimate graphics plugin for WordPress website builder ( Gutenberg, Elementor, Beaver Builder, WPBakery ) <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9024
Material Design Icons <= 0.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via mdi-icon Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.