Medium
CVE-2024-35773
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2024-37520
ShopBuilder – Elementor WooCommerce Builder Addons <= 2.1.12 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37481
The Post Grid <= 7.7.4 - Missing Authorization via REST API
Medium
CVE-2024-37509
MakeCommerce for WooCommerce <= 3.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-37510
Charitable <= 1.8.1.7 - Missing Authorization via ajax_license_check()
Medium
CVE-2024-37507
Eventin <= 3.3.57 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-37490
Bard <= 2.210 - Cross-Site Request Forgery to Notice Dismissal
Critical
CVE-2024-37494
Youzify <= 1.2.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-7761
Simple Job Board <= 2.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-37499
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37934
Ninja Forms <= 3.8.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
High
CVE-2024-37497
JetThemeCore for Elementor <= 2.2.0 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2024-37482
The Post Grid <= 7.7.4 - Missing Authorization via AJAX
Medium
CVE-2024-37506
Charitable <= 1.8.1.7 - Missing Authorization to Unauthorized Donation
Medium
CVE-2024-37480
Apollo13 Framework Extensions <= 1.9.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-37483
The Post Grid <= 7.7.4 - Missing Authorization via save_block_css
Medium
CVE-2024-37504
FileBird Document Library <= 2.0.6 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-37418
Church Admin <= 4.4.6 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-37484
Zephyr Project Manager <= 3.3.97 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update
Medium
CVE-2024-37485
bbPress Notify <= 2.18.3 - Reflected Cross-Site Scripting
High
CVE-2024-37501
Advanced Classifieds & Directory Pro <= 3.1.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37487
WP Directory Kit <= 1.3.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-37486
Paid Memberships Pro <= 3.0.5 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-37952
Book Your Travel <= 8.18.17 - Authenticated (Subscriber+) Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.