Medium
CVE-2024-35719
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-5607
GDPR CCPA Compliance & Cookie Consent Banner <= 2.7.0 - Missing Authorization to Settings Update and Stored Cross-Site Scripting
Medium
CVE-2024-35730
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-35721
Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery <= 1.4.5 - Missing Authorization
Medium
CVE-2024-35743
SC filechecker <= 0.6 - Authenticated (Admin+) Arbitrary File Deletion
Medium
CVE-2024-35722
Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.4.0 - Missing Authorization
Medium
CVE-2024-35752
Stellissimo Text Box <= 1.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4703
One Page Express Companion <= 1.6.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via one_page_express_contact_form Shortcode
Medium
CVE-2024-35692
GDPR/CCPA Cookie Consent Banner <= 3.2 - Missing Authorization via handle_consent_toggle()
Medium
CVE-2023-6876
Clever Fox – One Click Website Importer by Nayra Themes <= 25.2.0 - Missing Authorization to arbitrary theme activation via clever-fox-activate-theme
Medium
CVE-2024-35725
LA-Studio Element Kit for Elementor <= 1.3.6 - Missing Authorization
Medium
CVE-2024-35689
Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Cross-Site Request Forgery
Medium
CVE-2024-35740
Pixgraphy <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35712
Database Cleaner <= 1.0.5 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2024-35696
WP Docs <= 2.1.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-35750
Gallery – Image and Video Gallery with Thumbnails <= 2.0.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-4354
TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind
Medium
CVE-2024-35727
Extra Product Options for WooCommerce <= 3.0.6 - Missing Authorization
Medium
CVE-2024-34765
Sensei Pro (WC Paid Courses) <= 4.23.1.1.23.1 - Authenticated (Student+) Stored Cross-Site Scripting
Medium
CVE-2024-35726
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.19 - Missing Authorization
Medium
CVE-2024-3987
WP Mobile Menu – The Mobile-Friendly Responsive Menu <= 2.8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Alt
High
CVE-2024-5599
FileOrganizer <= 1.0.7 - Sensitive Information Exposure via Directory Listing
Medium
CVE-2024-35707
Heateor Social Login WordPress <= 1.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35753
TemplatesNext OnePager <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.