Medium
CVE-2024-4489
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-35701
PropertyHive <= 2.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4042
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute
Medium
CVE-2024-35699
HT Feed <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35718
Newsletters <= 4.9.5 - Reflected Cross-Site Scripting
High
CVE-2024-5542
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget
Medium
CVE-2024-35716
Copymatic – AI Content Writer & Generator <= 1.9 - Missing Authorization
Medium
CVE-2024-35697
Eduma <= 5.4.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-35695
WP Docs <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-35745
Strategery Migrations <= 1.0 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-35704
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1330
Kadence Blocks Pro <= 2.3.7 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2023-5424
WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection
Medium
CVE-2024-1689
WooCommerce Tools <= 1.2.9 - Missing Authorization to Authenticated (Subscriber+) Plugin Module Deactivation
Medium
CVE-2024-35685
Radcliffe 2 <= 2.0.17 - Missing Authorization
Medium
CVE-2024-35728
PPOM for WooCommerce <= 32.0.20 - Unauthenticated Content Injection Vulnerability
Medium
CVE-2024-35754
Ovic Importer <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2024-35680
YITH WooCommerce Product Add-Ons <= 4.9.2 - Unauthenticated Content Injection
Medium
CVE-2024-35682
Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.11 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2024-35749
Under Construction / Maintenance Mode from Acurax <= 2.6 - Unauthenticated IP Spoofing
Medium
CVE-2024-35742
Easy Forms for Mailchimp <= 6.9.0 - Missing Authorization
Medium
CVE-2024-35735
WP Time Slots Booking Form <= 1.2.11 - Missing Authorization
Medium
CVE-2024-35738
Kognetiks Chatbot for WordPress <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35739
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.