Medium
CVE-2024-4569
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-37249
Advanced Custom Fields PRO < 6.3.2 - Missing Authorization
High
CVE-2024-6054
Auto Featured Image <= 1.2 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-37251
Advanced Custom Fields Pro <= 6.3.1 - Cross-Site Request Forgery
Low
CVE-2024-37253
WP Directory Kit <= 1.3.6 - Authenticated (Admin+) HTML Injection
Medium
CVE-2024-37250
Advanced Custom Fields Pro <= 6.3.1 - Missing Authorization
Medium
CVE-2024-5215
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2024-5173
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings
High
CVE-2024-4869
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header
Medium
CVE-2024-5332
Exclusive Addons for Elementor <= 2.6.9.8 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget
Medium
CVE-2024-37245
All In One Redirection <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-37248
Anima <= <=1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37246
Gallery Slideshow <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
379a5016-3968-4b28-8d6e-0f517e419016
Various Plugins <= Various Version - Use of Polyfill.io
Medium
CVE-2024-5451
The7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Critical
CVE-2024-6028
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
High
CVE-2024-5431
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
Medium
CVE-2024-6075
WP eStore <= 8.5.4 - Cross-Site Request Forgery to Coupon Deletion
Medium
CVE-2024-6073
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Discount Editing
Medium
CVE-2024-6307
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API
High
CVE-2024-5630
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2024-6072
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via REQUEST_URI
Medium
CVE-2024-6074
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Customer Editing
Medium
CVE-2024-3249
Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.