Medium
CVE-2024-43127
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2024-43135
WPCafe <= 2.2.28 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43155
ComboBlocks <= 2.2.86 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7492
MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2024-6869
Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure
Medium
CVE-2024-43142
Tutor LMS <= 2.7.3 - Missing Authorization
Medium
CVE-2024-43124
Graphina <= 1.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43123
Card Elements for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-38787
Import and export users and customers <= 1.26.8 - Unauthenticated Information Exposure
Medium
CVE-2024-43157
FormCraft <= 1.2.10 - Missing Authorization
Medium
CVE-2024-6824
Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update
Medium
CVE-2024-43139
Football Pool <= 2.11.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-43148
StreamCast <= 2.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2024-7561
The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-43118
Hummingbird <= 3.9.1 - Missing Authorization
High
CVE-2024-43129
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43125
WP Table Builder – WordPress Table Plugin <= 1.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43149
CM Tooltip Glossary <= 4.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43165
WPSection <= 1.3.8 - Authenticated (Contributor+) Local File Inlcusion
Medium
CVE-2024-5668
Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.28 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes
Medium
CVE-2024-43158
Masteriyo - LMS <= 1.11.4 - Missing Authorization
Medium
CVE-2024-7590
Spectra – WordPress Gutenberg Blocks <= 2.15.0 - Authenticated (Contributor+) Stored Cross-site Scripting
Medium
CVE-2024-43161
Depicter Slider <= 3.1.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43126
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.15 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.