Medium
CVE-2024-5645
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-5612
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox and Modal Widget
High
CVE-2024-4902
Tutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-5640
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget
High
CVE-2024-4887
Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-5425
WP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute
Critical
CVE-2024-3592
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-35746
BuddyPress Cover <= 2.1.4.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-35748
WooCommerce Dropshipping <= 5.0.4 - Missing Authorization to Unauthenticated Arbitrary Email Send
Medium
CVE-2024-35720
Album Gallery – WordPress Gallery <= 1.5.7 - Missing Authorization
Medium
CVE-2024-1988
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5382
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification
Medium
CVE-2024-35751
Woody code snippets – Insert Header Footer Code, AdSense Ads <= 2.5.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-35711
Theme <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35714
Idyllic <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35691
Widget Options - Extended <= 5.1.0 & Widget Options <= 4.0.1 - Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2024-35729
Tickera <= 3.5.2.6 - Missing Authorization
Medium
CVE-2024-35744
Upunzipper <= 1.0.0 - Authenticated (Admin+) Arbitrary File Deletion
Medium
CVE-2024-35731
Kenta Blocks – Responsive Blocks and block templates library <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4488
Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35705
Block for Font Awesome <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-5637
Market Exporter <= 2.0.19 - Missing Authorization to Arbitrary File Deletion
Medium
CVE-2023-6491
Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification
Medium
CVE-2024-35683
Leyka <= 3.31.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.