Medium
CVE-2024-37562
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-37922
Premium Addons for Elementor <= 4.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-5807
Business Card <= 1.0.0 - Authenticated (Admin+) Arbitrary File Uplaod
Medium
CVE-2024-6536
Zephyr Project Manager <= 3.3.97 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-37926
WP Accessibility Helper (WAH) <= 0.6.2.9 - Missing Authorization
Medium
CVE-2024-4096
Responsive Tabs <= 4.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-6021
Donation Block For PayPal <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-3986
SportsPress – Sports Club & League Manager <= 2.7.21 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-37921
Chained Quiz <= 1.3.2.8 - Missing Authorization
High
CVE-2024-37560
WP User Switch <= 1.1.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-37918
ConeBlog – WordPress Blog Widgets <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5809
WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-37924
WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Unauthenticated Information Exposure
Medium
CVE-2024-6230
Pardakht Delkhah <= 2.9.8 - Cross-Site Request Forgery to Form Setting Reset
Medium
CVE-2024-5808
WP Ajax Contact Form <= 2.2.2 - Cross-Site Request Forgery to Arbitrary Email Deletion
Critical
CVE-2024-5765
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Unauthenticated SQL Injection
Critical
CVE-2024-37928
Jobmonster < 4.7.5 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-3113
FormFlow <= 2.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1287
Paid Memberships Pro - Member Directory Add On < 1.2.6 - Authenticated (Contributor+) Information Exposure
Critical
CVE-2024-37933
Woocommerce OpenPos <= 6.4.4 - Unauthenticated SQL Injection
Medium
CVE-2024-37923
Cliengo – Chatbot <= 3.0.4 - Cross-Site Request Forgery
Medium
CVE-2024-37561
Plugin Notes Plus <= 1.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-37927
Jobmonster <= 4.7.5 - Unauthenticated Privilege Escalation
Medium
CVE-2024-37919
Timeline Module for Beaver Builder <= 1.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.