Medium
CVE-2024-31257
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-31262
WooCommerce Checkout Field Editor (Checkout Manager) <= 2.1.8 - Cross-Site Request Forgery
Medium
CVE-2024-31299
ReDi Restaurant Reservation <= 24.0128 - Cross-Site Request Forgery via redi_restaurant_admin_options_page()
Medium
CVE-2024-31245
ConvertKit <= 2.4.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31253
OAuth Server <= 4.3.3 - Open Redirect
Medium
CVE-2024-2603
Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting via Email Settings
Medium
CVE-2024-31287
Media Library Folders <= 8.1.8 - Authenticated (Author+) Directory Traversal
Medium
CVE-2024-31293
Easy Digital Downloads <= 3.2.6 - Cross-Site Request Forgery
Medium
CVE-2024-31247
FG Drupal to WordPress <= 3.70.3 - Sensitive Information Exposure
Medium
CVE-2024-31254
WordPress Backup & Migration <= 1.4.7 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-31288
RapidLoad Power-Up for Autoptimize <= 2.2.11 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-31271
Ultimate Maps by Supsystic <= 1.2.16 - Cross-Site Request Forgery
Medium
CVE-2024-31346
Gradient Text Widget for Elementor <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1994
Image Watermark <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification
Medium
CVE-2024-2310
WP Google Review Slider <= 13.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-31264
Post Views Counter <= 1.4.4 - Cross-Site Request Forgery via save_bulk_post_views()
Critical
CVE-2024-31237
s2Member <= 240315 - Limited Privilege Escalation
Medium
CVE-2024-31307
Easy Social Share Buttons <= 9.4 - Missing Authorization
Medium
CVE-2024-31283
Advanced Local Pickup for WooCommerce <= 1.6.2 - Missing Authorization
Medium
CVE-2024-3266
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute
Medium
CVE-2024-31341
Profile Builder <= 3.11.2 - Restricted Email Bypass
Medium
CVE-2024-31272
ARForms Form Builder <= 1.6.1 - Cross-Site Request Forgery
Medium
CVE-2026-15283
WPvivid Backup for MainWP <= 0.9.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31302
Contact Form Email <= 1.3.44 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.