Medium
CVE-2024-31273
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Critical
CVE-2024-24882
Masteriyo - LMS <= 1.7.2 - Unauthenticated Privilege Escalation
High
CVE-2024-31280
Church Admin <= 4.1.5 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-31306
Essential Blocks for Gutenberg <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3059
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery to Campaign Deletion
Critical
CVE-2024-31266
Advanced Order Export For WooCommerce <= 3.4.4 - Authenticated (Shop Manager+) Remote Code Execution
Critical
CVE-2024-31286
WP Photo Album Plus <= 8.6.03.004 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-31297
Wholesale For WooCommerce <= 2.3.0 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-31350
AWP Classifieds <= 4.3.1 - Missing Authorization
Medium
CVE-2024-3244
EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-31244
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Update
Medium
CVE-2024-3075
MM-email2image <= 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-31242
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Medium
CVE-2024-31298
User Spam Remover <= 1.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31259
SearchIQ <= 4.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-3188
Shortcodes Ultimate <= 7.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31250
WP Server Health Stats <= 1.7.3 - Cross-Site Request Forgery
Medium
CVE-2024-31281
Church Admin <= 4.1.6 - Missing Authorization
Medium
CVE-2024-3048
Bannerlid <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-31269
Easy Google Maps <= 1.11.11 - Cross-Site Request Forgery
High
CVE-2024-31240
WP Poll Maker <= 3.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2024-31261
Announcer – Notification & message bars <= 6.0 - Missing Authorization
Medium
CVE-2024-0662
FancyBox for WordPress 3.0.2 - 3.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-1428
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trailer Box Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.