Medium
CVE-2024-30434
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-6965
Pods - Custom Content Types and Fields - Missing Authorization
Medium
CVE-2024-30517
Sliced Invoices <= 3.9.2 - Missing Authorization
Medium
CVE-2024-2844
Easy Appointments <= 3.11.18 - Insufficient Authorization
Medium
CVE-2024-30447
Creative Image Slider – Responsive Slider Plugin <= 2.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30470
YITH WooCommerce Account Funds Premium <= 1.33.0 - Missing Authorization
Medium
CVE-2024-30455
GamiPress <= 6.8.5 - Cross-Site Request Forgery
Medium
CVE-2024-30506
All In One Redirection <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-30439
Limit Attempts by BestWebSoft <= 1.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-30513
ProfileGrid <= 5.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-30422
Elementor Addon Elements <= 1.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-15295
Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-30453
Brave Popup Builder <= 0.6.5 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-30425
Beaver Builder <= 2.7.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2964
Pocket News Generator <= 0.2.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-30481
JCH Optimize <= 4.0.0 - Missing Authorization
Medium
CVE-2024-2842
Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30432
B Slider - Slider for your block editor <= 1.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30452
Landing Page Builder <= 1.5.1.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-30440
Themify Event Post <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-30505
Church Admin <= 4.1.18 - Missing Authorization
Medium
CVE-2024-2841
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-0609
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2024-30491
ProfileGrid <= 5.7.8 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.