Medium
CVE-2024-29759
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
Medium
CVE-2024-1310
WooCommerce <= 8.5.2 - Missing Authorization to Private/Draft Product Disclosure
Medium
CVE-2024-2027
Real Media Library: Media Library Folder & File Manager <= 4.22.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2303
Easy Textillate <= 2.01 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1204
Meta Box – WordPress Custom Fields Framework <= 5.9.3 - Authenticated (Contributor+) Information Exposure via Post Meta
Medium
CVE-2024-30195
RoyalSlider <= 3.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-29813
Funnel Builder by CartFlows <= 2.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-29762
Off-Canvas Sidebars & Menus (Slidebars) <= 0.5.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29805
Shipping with Venipak for WooCommerce <= 1.19.5 - Reflected Cross-Site Scripting via 'venipak_labels_link'
Medium
CVE-2024-29806
ReDi Restaurant Reservation <= 24.0128 - Reflected Cross-Site Scripting
High
CVE-2023-7201
Everest Backup <= 2.2.4 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-1307
Smart Forms <= 2.6.93 - Missing Authorization
Medium
CVE-2024-2888
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.26.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1755
NPS computy <= 2.7.5 - Cross-Site Request Forgery to Results Deletion
Medium
CVE-2024-29928
Advanced Sermons <= 3.1 - Reflected Cross-Site Scripting via s
Medium
CVE-2024-2836
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.13.63 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-30179
Bold Page Builder <= 4.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via class
Medium
CVE-2024-29791
Bulk NoIndex & NoFollow Toolkit <= 2.01 - Reflected Cross-Site Scripting via tab, order, and orderby
Medium
CVE-2024-1712
Carousel Slider <= 2.2.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-2858
Simple Buttons Creator <=1.04 - Cross-Site Request Forgery to Arbitrary Button Deletion
Medium
CVE-2024-29816
Woo Viet <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29922
Slider Hero <= 8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29795
Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more <= 4.5.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-29766
StreamWeasels Twitch Integration <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.