Medium
CVE-2024-34372
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2024-34434
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-34383
SEOPress <= 7.6.1 - Information Exposure
Medium
CVE-2024-34382
Robo Gallery <= 3.2.18 - Unauthenticated Information Exposure
Medium
CVE-2024-1230
SimpleShop <= 2.10.0 - Cross-Site Request Forgery
Medium
CVE-2024-4335
Rank Math SEO with AI Best SEO Tools <= 1.0.217 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3915
Swift Framework <= 2.7.31 - Missing Authorization to Unauthenticated Arbitrary Content Update
Medium
CVE-2024-34366
Download Alt Text AI <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3916
Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2024-4383
Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-34374
ElementsReady Addons for Elementor <= 5.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34376
Edge <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Display Name
Medium
CVE-2024-1229
SimpleShop <= 2.10.2 - Missing Authorization
Medium
CVE-2024-34375
Sheets To WP Table Live Sync <= 3.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3974
BuddyPress <= 12.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-34369
Webpushr <= 4.35.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-34371
Login with phone number <= 1.7.18 - Missing Authorization
Medium
CVE-2023-6327
ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products
Medium
CVE-2024-4158
Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4150
Simple Basic Contact Form <= 20221201 - Reflected Cross-Site Scripting
Medium
CVE-2024-34377
Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery <= 1.5.3 - Missing Authorization
Medium
CVE-2023-7065
Stop Spammers Security | Block Spam Users, Comments, Forms <= 2024.4 - Cross-Site Request Forgery (CSRF) via sfs_process
High
CVE-2024-34370
EAN for WooCommerce <= 4.8.9 - Authenticated (Shop Manager+) Arbitrary Options Update
Medium
CVE-2024-3237
ConvertPlug <= 3.5.25 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.