Medium
CVE-2024-31095
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-2456
Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-30539
Awesome Support <= 6.1.7 - Missing Authorization
Medium
CVE-2024-30511
FG PrestaShop to WooCommerce <= 4.45.1 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2024-31084
Weekly Class Schedule <= 3.19 - Reflected Cross-Site Scripting
Medium
CVE-2024-31092
Comic Easel <= 1.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-30547
Header Image Slider <= 0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-1238
ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31112
Convert Post Types <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-30541
LWS Optimize <= 1.9.1 - Cross-Site Request Forgery
Medium
CVE-2024-30526
Easy Social Feed <= 6.5.6 - Cross-Site Request Forgery
Medium
CVE-2024-31109
Woocommerce Social Media Share Buttons <= 1.3.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-31105
Tax Rate Upload <= 2.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-30530
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30561
Appointment Calendar <= 2.9.6 - Reflected Cross-Site Scripting
High
CVE-2024-30551
Sticky Anything <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-30554
DD Rating <= 1.7.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-30559
Spin 360 deg and 3D Model Viewer <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2140
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget
Medium
CVE-2024-1051
List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-2086
Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export
Medium
CVE-2024-2847
WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2024-31116
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-31086
Change default login logo,url and title <= 2.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.