Medium
CVE-2024-31368
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-31366
Post Type Builder < 2.1.4 - Missing Authorization to Arbitrary Post/Page Creation
Medium
CVE-2024-31367
Soledad <= 8.4.5 - Missing Authorization
High
CVE-2024-2018
WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-2733
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
Medium
CVE-2024-2666
Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-0376
Premium Addons for Elementor <= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget
High
CVE-2024-1774
Customily Product Personalizer <= 1.23.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-31447
Shopware Improper Session Handling in store-api account logout
Medium
CVE-2024-31359
Premmerce Product Filter for WooCommerce <= 3.7.2 - Missing Authorization
Medium
CVE-2024-31375
WP2LEADS <= 3.2.7 - Missing Authorization
Medium
CVE-2024-2306
Revslider <= 6.6.20 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-31357
Ultimate Store Kit Elementor Addons <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31358
5 star review funnel for Google Reviews, Trustpilot, ProvenExpert and more | RRatingg <= 1.2.67 - Missing Authorization
Medium
CVE-2024-29220
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31364
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Cross-Site Request Forgery
Medium
CVE-2024-26019
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3167
Ocean Extra <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3670
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) <= 3.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-2505
GamiPress <= 6.8.8 - Broken Access Control
Medium
CVE-2024-31360
Benchmark Email Lite <= 4.1 - Cross-Site Request Forgery via page_settings()
Medium
CVE-2024-31361
bunny.net – WordPress CDN Plugin <= 2.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1905
Smart Forms – when you need more than just a contact form <= 2.9.95 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31363
LifterLMS <= 7.5.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.