Low
CVE-2024-31342
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-31265
Sumo <= 1.34 - Cross-Site Request Forgery
Medium
CVE-2024-31248
All-in-One Video Gallery <= 3.5.2 - Missing Authorization
Medium
CVE-2024-31349
MailMunch – Grow your Email List <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3216
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset
Medium
CVE-2024-31252
Responsive Lightbox <= 2.4.6 - Missing Authorization via Information Disclosure
Medium
CVE-2024-31301
Multiple Page Generator Plugin – MPG <= 3.4.0 - Cross-Site Request Forgery
Medium
CVE-2024-31296
BookingPress <= 1.0.81 - Authenticated (Customer+) Insecure Direct Object Reference
Medium
CVE-2024-31278
Premium Addons for Elementor <= 4.10.22 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-0837
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Custom Gallery' Widget
Medium
CVE-2024-3245
EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Block
Medium
CVE-2024-31303
Sign-up Sheets <= 2.2.11.1 - Cross-Site Request Forgery
High
CVE-2024-1385
WP-Stateless – Google Cloud Storage <= 3.4.0 - Missing Authorization to Limited Arbitrary Options Update
Medium
CVE-2024-31267
Flexible Checkout Fields for WooCommerce <= 4.1.2 - Missing Authorization
Medium
CVE-2024-2296
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG
Critical
CVE-2024-31241
LearnPress Export Import <= 4.0.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-31343
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10.1 - Unauthenticated Arbitrary File Download
Medium
CVE-2024-31275
EventPrime <= 3.3.4 - Missing Authorization to Booking Price Maniputlation
Medium
CVE-2024-2949
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode'
Medium
CVE-2024-31270
ARForms Form Builder <= 1.6.1 - Missing Authorization
Medium
CVE-2024-31235
WordPress Comments Import & Export <= 2.3.5 - Cross-Site Request Forgery
Medium
CVE-2024-31304
WC Marketplace <= 4.1.3 - Missing Authorization
High
CVE-2024-31300
Easy Social Share Buttons <= 9.4 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2024-3076
MM-email2image <= 0.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.