Medium
CVE-2024-37508
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-37498
Table & Contact Form 7 Database – Tablesome <= 1.0.33 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-37500
Beaver Builder <= 2.8.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37488
HelloAsso <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37495
Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37489
Ocean Extra <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-5943
Nested Pages <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusion
High
CVE-2024-2385
Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets
Medium
CVE-2024-3638
Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets
Medium
CVE-2024-2926
Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets
Medium
CVE-2024-3639
Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid
Medium
CVE-2024-5641
One Click Order Re-Order <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-6319
IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload'
Medium
CVE-2024-6094
WP ULike <= 4.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
CVE-2024-6434
Premium Addons for Elementor <= 4.10.35 - Regular Expressions Denial of Service
High
CVE-2024-6318
IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'
Medium
CVE-2024-6340
Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Medium
CVE-2024-4482
The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Medium
CVE-2024-6263
WP Lightbox 2 <= 3.0.6.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-37479
LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion via 'progress_type'
Medium
CVE-2024-6420
Hide My WP Ghost – Security & Firewall <= 5.2.01 - Login Page Disclosure
Medium
CVE-2024-6231
Request a Quote <= 2.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4260
Page Builder Gutenberg Blocks – CoBlocks <= 3.1.11 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2024-4543
Snippet Shortcodes <= 4.1.4 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.