Medium
CVE-2024-43356
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-43325
Dark Mode for WP Dashboard <= 1.2.3 - Cross-Site Request Forgery
Medium
CVE-2024-43347
Button contact VR <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-43284
WP Travel Gutenberg Blocks <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4507
Admission AppManager <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-43348
Purity Of Soul <= 1.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-43342
Ultimate Store Kit Elementor Addons <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4532
LOGIN AND REGISTRATION ATTEMPTS LIMIT<= 2.1 - IP Address Spoofing to Protection Mechanism Bypass
High
CVE-2024-43354
myCred <= 2.7.2 - Unauthenticated PHP Object Injection
Medium
CVE-2023-4024
Radio Player <= 2.0.73 - Missing Authorization to Player Deletion
Medium
CVE-2024-43320
Livemesh Addons for WPBakery Page Builder <= 3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4027
Radio Player <= 2.0.73 - Missing Authorization to Settings Update
Medium
CVE-2024-43350
Propovoice CRM <= 1.7.8 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2024-43344
Icegram <= 3.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-43328
EmbedPress <= 4.0.9 - Unauthenticated Local File Inclusion
Medium
CVE-2024-43336
WP User Manager <= 2.9.10 - Cross-Site Request Forgery
Medium
CVE-2024-43309
WP Telegram Widget and Join Link <= 2.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43313
FormFacade <= 1.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-43323
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.28 - Insufficient Input Validation
Medium
CVE-2024-43335
Responsive Blocks – WordPress Gutenberg Blocks <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43317
RegistrationMagic <= 6.0.1.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2023-3419
tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-3409
Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings
High
CVE-2024-43281
Void Elementor Post Grid Addon for Elementor Page builder <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.