Medium
CVE-2024-43150
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-43154
Advanced Cron Manager – debug & control <= 2.5.9 - Missing Authorization
Medium
CVE-2024-43147
Selection Lite <= 1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-43145
GeoDirectory <= 2.3.61 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-43138
Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-43140
Ultimate Bootstrap Elements for Elementor <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43116
Simple Local Avatars <= 2.7.10 - Cross-Site Request Forgery via save_default_avatar_file_id()
Medium
CVE-2024-43128
WooCommerce Product Table Lite <= 3.5.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-43137
WappPress <= 6.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-43144
Cost Calculator Builder <= 3.2.15 - Unauthenticated SQL Injection
Critical
CVE-2024-43160
BerqWP <= 1.7.6 - Unauthenticated Arbitrary File Uplaod
Critical
CVE-2024-6926
Viral Signup <= 2.1 - Unauthenticated SQL Injection
Medium
CVE-2024-43136
Sunshine Photo Cart <= 3.2.1 - Missing Authorization
Medium
CVE-2024-6987
Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation
Medium
CVE-2024-43143
Registrations for the Events Calendar <= 2.12.1 - Missing Authorization
Medium
CVE-2024-43151
Ultimate Addons for Beaver Builder – Lite <= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43117
Hummingbird <= 3.9.1 - Cross-Site Request Forgery
Critical
CVE-2024-7350
Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover
Medium
CVE-2024-43119
Aruba HiSpeed Cache <= 2.0.12 - Missing Authorization
Medium
CVE-2024-6927
Viral Signup <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-43132
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Unauthenticated SQL Injection
Medium
CVE-2024-43131
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Missing Authorization to Unauthenticated Arbitrary Post/Page Deletion
Medium
CVE-2024-43133
Themify Shortcodes <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43164
Blockspare <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.