Medium
CVE-2024-37550
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-37553
Testimonials Widget <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37540
Leaky Paywall <= 4.21.2 - Cross-Site Request Forgery
Medium
CVE-2024-37539
WP To Do <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37549
Save as PDF plugin by Pdfcrowd <= 4.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
CVE-2024-37558
WPFavicon <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-37548
Meks Easy Ads Widget <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37557
WP Cookie Law Info <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37505
Business One Page <= 1.2.9 - Missing Authorization to Notice Dismissal
Medium
CVE-2024-37536
Easy Custom Code (LESS/CSS/JS) – Live editing <= 1.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37523
Login Logo Editor <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37517
Spectra <= 2.13.7 - Missing Authorization via generate_ai_content
Medium
CVE-2024-37522
CC & BCC for Woocommerce Order Emails <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37518
The Events Calendar <= 6.5.1.4 - Cross-Site Request Forgery via action_restore_events
Medium
CVE-2024-37537
WS Contact Form <= 1.3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37512
NEX-Forms – Ultimate Form Builder <= 8.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37519
Premium Blocks – Gutenberg Blocks for WordPress <= 2.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-37502
WooCommerce Social Login <= 2.6.3 - Unauthenticated PHP Object Injection
High
CVE-2024-37513
WPCafe <= 2.2.27 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37514
CopySafe Web Protection <= 3.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37516
Featured Image from URL <= 4.8.2 - Missing Authorization
Medium
CVE-2024-37515
XPlainer - WooCommerce Product FAQ <= 1.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-37521
zBench <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37511
Swift Performance Lite <= 2.3.6.20 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.