Medium
CVE-2024-3111
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-35724
Bosa Elementor Addons and Templates for WooCommerce <= 1.0.12 - Missing Authorization
Medium
CVE-2024-35715
Bloglo <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35687
Link Library <= 7.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-35693
12 Step Meeting List <= 3.14.33 - Reflected Cross-Site Scripting
Medium
CVE-2024-35679
GiveWP – Donation Plugin and Fundraising Platform <= 3.12.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-1768
Clever Fox <= 25.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35684
ElasticPress <= 5.1.0 - Cross-Site Request Forgery
Medium
CVE-2024-35698
YITH WooCommerce Tab Manager <= 1.35.0 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2024-35706
Heateor Social Login WordPress <= 1.1.32 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-35734
WP Time Slots Booking Form <= 1.2.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-35710
Podlove Web Player <= 5.7.3 - Missing Authorization to Unauthenticated Information Exposure
Medium
CVE-2024-4451
Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode
Medium
CVE-2024-35723
Dashboard To-Do List <= 1.2.0 - Missing Authorization via ardtdw_widgetsetup()
Medium
CVE-2024-4664
WP Chat App <= 3.6.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5438
Tutor LMS – eLearning and online course solution <= 2.7.1 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Quiz Attempt Deletion
Medium
CVE-2024-35747
Contact Form Builder, Contact Widget <= 2.1.7 - Authentication Request Bypass
Medium
CVE-2024-35681
Comments – wpDiscuz <= 7.6.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-5329
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
Medium
CVE-2024-5259
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter
Medium
CVE-2024-5221
Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-5665
Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure
Medium
CVE-2024-5141
Rotating Tweets (Twitter widget and shortcode) <= 1.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5162
WordPress prettyPhoto <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.