High
CVE-2024-2087
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2024-3667
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL
Medium
CVE-2024-1161
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Medium
CVE-2024-5483
LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API
Medium
CVE-2024-5615
Open Graph <= 1.11.2 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-4757
Logo Manager For Enamad <= 0.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-4001
Download Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode
Medium
CVE-2024-5149
BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness
Critical
CVE-2024-4295
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash
Medium
CVE-2024-4759
Mime Types Extended <= 0.11 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Medium
CVE-2024-2368
Mollie Forms <= 2.6.13 - Cross-Site Request Forgery to Arbitrary Post Duplication
Medium
CVE-2024-5317
Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1
Medium
CVE-2024-5459
Restaurant Menu and Food Ordering <= 2.4.16 - Missing Authorization to Menu Creation
Medium
CVE-2024-5485
SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! <= 1.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trigger Link Shortcode
Medium
CVE-2024-3031
Fluid Notification Bar <= 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4462
Nafeza Prayer Time <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-3555
Social Link Pages: link-in-bio landing pages for your social media profiles <= 1.6.9 - Missing Authorization to Arbitrary Page Creation and Cross-Site Scripting
High
CVE-2024-2019
WP-DB-Table-Editor <= 1.8.4 - Missing Authorization to Authenticated(Contributor+) Database Access
Medium
CVE-2024-1718
Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update
Medium
CVE-2024-4697
Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via heading_tag Parameter
Medium
CVE-2024-2382
Authorize.net Payment Gateway For WooCommerce <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass
Medium
CVE-2024-1717
Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
Medium
CVE-2024-4997
WPUpper Share Buttons <= 3.43 - Missing Authorization
Medium
CVE-2024-4274
Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.