Medium
CVE-2024-30545
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-2144
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget
Medium
CVE-2024-31102
Prenotazioni <= 1.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-30540
VS Contact Form <= 14.7 - CAPTCHA Bypass
High
CVE-2024-30532
Builderall Builder for WordPress <= 2.0.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-31119
Special Box for Content <= 1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-31106
Yoo Slider <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-0367
Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link
Medium
CVE-2024-30538
DELUCKS SEO <= 2.5.4 - Missing Authorization
Medium
CVE-2024-30527
WP Express Checkout (Accept PayPal Payments) <= 2.3.7 - Unauthenticated Price Manipulation
Critical
CVE-2024-30535
Easy Form Builder <= 3.7.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-30549
Contact Forms by Cimatti <= 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-31115
Chauffeur Taxi Booking System for WordPress <= 7.2 - Unauthenticated Arbitrary File Upload
High
CVE-2024-2047
ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw
Medium
CVE-2024-30552
Responsive flipbook <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2513
WP Chat App <= 3.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Image Attribute
Medium
CVE-2024-2948
Favorites <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-31103
Kanban Boards for WordPress <= 2.5.21 - Reflected Cross-Site Scripting
High
CVE-2024-3018
Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword
Medium
CVE-2024-30556
Mighty Classic Pros And Cons <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31118
SP Project & Document Manager <= 4.70 - Missing Authorization Stored Cross-Site Scripting
Medium
CVE-2024-24888
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2024-2143
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget
High
CVE-2024-1794
Forminator <= 1.29.0 - Unauthenticated Stored Cross-Site Scripting via File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.