Medium
CVE-2024-34424
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2024-34412
Shipment Tracking, Tracking, and Order Tracking for WooCommerce – ParcelPanel (Free to install) <= 3.8.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-34431
WP etracker <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-34418
WPCS ( WordPress Custom Search ) <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-2923
Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) <= 1.1.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Effect Widget
Medium
CVE-2024-34427
WP Favorite Posts <= 1.6.8 - Cross-Site Request Forgery
Medium
CVE-2024-4411
Mihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-34425
QuickieBar <= 1.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4314
hostel <= 1.1.5.3 - Cross-Site Request Forgery
Critical
CVE-2024-4186
Edwiser Bridge <= 3.0.5 - Authentication Bypass due to Missing Empty Value Check
Medium
CVE-2024-34419
Configure Login Timeout <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4446
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagingType Parameter
Medium
CVE-2023-6810
ClickCease Click Fraud Protection <= 3.2.4 - Improper Authorization to sensitive information exposure via get_settings
Medium
CVE-2024-4041
Yoast SEO <= 22.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-1166
Image Hover Effects - Elementor Addon <= 1.4.1 - Authenticated(Contributor+) DOM-based Stored Cross-Site Scripting via Image Hover Effects Widget
Medium
CVE-2024-34387
WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.6.4 - Missing Authorization to Rating Manipulation
Medium
CVE-2024-34426
Brozzme Scroll Top <= 1.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3939
Ditty <= 3.1.35 - Authenticated (Author+) Stored Cross-Site Scripting
Critical
CVE-2024-4345
Startklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-34430
TT Custom Post Type Creator <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-34390
Post Grid Master <= 3.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-34386
Auto Affiliate Links <= 6.4.3.1 - Authenticated (Editor+) SQL Injection
Medium
CVE-2024-34417
Viet Nam Affiliate <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4532
Business Card <= 1.0.0 - Cross-Site Request Forgery to Arbitrary Card Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.