Medium
CVE-2024-2491
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-31087
pageMash > Page Management <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-30558
Add Shortcodes Actions And Filters <= 2.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-30524
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31120
Responsive Image Gallery, Gallery Album <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-30533
Layouts for Elementor <= 1.7 - Missing Authorization to Unauthenticated Arbitrary File Upload
Medium
CVE-2024-30543
Whizzy <= 1.1.18 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-31110
Contact Form 7 Newsletter <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-30550
Responsive Image Gallery, Gallery Album <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30537
WPC Badge Management for WooCommerce <= 2.4.0 - Missing Authorization
Medium
CVE-2024-31093
Broken Images <= 0.2 - Cross-Site Request Forgery
Medium
CVE-2024-30560
DX-Watermark <= 1.0.4 - Cross-Site Request Forgery
Medium
CVE-2024-30548
underConstruction <= 1.21 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-30534
Calendarista Basic Edition <= 3.0.5 - Missing Authorization
Medium
CVE-2024-30531
Nelio Content <= 3.2.0 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2024-30525
Move Addons for Elementor <= 1.2.9 - Missing Authorization
Medium
CVE-2024-31121
HeartThis <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30536
Slugs Manager <= 2.6.7 - Cross-Site Request Forgery
Medium
CVE-2024-30528
Spiffy Calendar <= 4.9.10 - Missing Authorization
Medium
CVE-2024-2492
PowerPack Addons for Elementor <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widget
Medium
CVE-2024-30542
WholesaleX <= 1.3.2 - Unauthenticated Privilege Escalation
Medium
CVE-2024-1692
BoldGrid Easy SEO – Simple and Effective SEO <= 1.6.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Description
Medium
CVE-2024-31100
Popup Cart Lite for WooCommerce <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2024-31122
User Rights Access Manager <= 1.1.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.