Medium
CVE-2024-43307
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-43332
Photo Engine <= 6.4.0 - Missing Authorization
Medium
CVE-2024-43301
Fonts <= 3.7.7 - Cross-Site Request Forgery
Medium
CVE-2024-43295
WP Data Access <= 5.5.7 - Cross-Site Request Forgery
Medium
CVE-2024-43296
Flash & HTML5 Video <= 2.5.30 - Missing Authorization
High
CVE-2024-43282
Tutor LMS <= 2.7.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-43330
PowerPack for Beaver Builder <= 2.37.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-43303
White Label CMS <= 2.7.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-6792
WP ULike 4.7.1 - 4.7.2 - Authenticated (Subscriber+) Stored-Cross-Site Scripting
Medium
CVE-2024-43343
Order Tracking <= 3.3.11 - Missing Authorization via send_test_email()
Medium
CVE-2024-39666
WooCommerce <= 9.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-43292
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.16 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-43346
Modal Window <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4025
Radio Player <= 2.0.73 - Missing Authorization to Player Update
Medium
CVE-2024-43314
Asset CleanUp: Page Speed Booster <= 1.3.9.3 - Missing Authorization
High
CVE-2023-3416
tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
Critical
CVE-2024-43311
Login As Users <= 1.4.2 - Authentication Bypass
Medium
CVE-2024-43315
Stripe Payments For WooCommerce by Checkout <= 1.9.1 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2023-4730
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.3 - Missing Authorization via init_endpoint
Medium
CVE-2024-43352
GivingPress Lite <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-0714
Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload
Medium
CVE-2024-43353
myCred <= 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43279
Newsletters <= 4.9.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-43319
Flash & HTML5 Video <= 2.5.31 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.