Medium
CVE-2024-37213
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-37209
User Rights Access Manager <= 1.1.2 - Missing Authorization
Medium
CVE-2024-37095
Envira Photo Gallery <= 1.8.7.3 - Cross-Site Request Forgery to Notice Dismissal
Medium
CVE-2024-37096
Popup box <= 4.5.1 - Missing Authorization
Medium
CVE-2024-37114
My Favorites <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-44593
Solid Security <= 9.3.1 - IP Address Spoofing to Denial of Service
Medium
CVE-2024-37121
Shortcode Addons <= 3.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3610
WP Child Theme Generator <= 1.1.1 - Missing Authorization to Unauthenticated Child Theme Creation/Activation
Medium
CVE-2024-37116
Sinatra <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-37212
Ali2Woo Lite <= 3.4.4 - Cross-Site Request Forgery to PHP Object Injection
Medium
CVE-2024-37207
Demo Awesome <= 1.0.2 - Missing Authorization
Medium
CVE-2024-37113
WishList Member X < 3.26.7 - Unauthenticated Information Exposure
Medium
CVE-2024-4655
Ultimate Blocks – WordPress Blocks Plugin <= 3.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37122
Accordions <= 2.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37206
Demo Awesome <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-37203
Laybuy Payment Extension for WooCommerce <= 5.3.9 - Missing Authorization
Medium
CVE-2024-37202
Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter <= 1.222.17 - Missing Authorization
Medium
CVE-2024-37208
WP Scraper <= 5.8 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2024-6025
Quiz and Survey Master <= 9.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5945
WP SVG Images <= 4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-37100
Elegant Themes Icons <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5191
Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Medium
CVE-2024-5444
Bible Text <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37097
Shortcodes by United Themes < 5.0.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.