Critical
CVE-2024-3820
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2024-3200
wpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-4958
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalation
Medium
CVE-2024-1324
QQWorld Auto Save Images <= 1.9.8 - Missing Authorization to Arbitrary Post Content Retrieval
Medium
CVE-2024-2506
Popup Builder <= 4.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom JS
Medium
CVE-2024-4087
Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget
Medium
CVE-2024-4342
Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4711
WordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2024-2933
Page Builder Gutenberg Blocks – CoBlocks <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles
Medium
CVE-2024-5448
PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4970
Widget Bundle <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-5348
Elements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes
High
CVE-2024-3821
wpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification
Medium
CVE-2024-4381
CB (legacy) <= 0.9.4.18 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-3564
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2024-4377
DOP Shortcodes <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4969
Widget Bundle <= 2.0.0 - Cross-Site Request Forgery to Widget Disable/Enable
Medium
CVE-2024-5501
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4616
Widget Bundle <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-4475
WP Logs Book <= 1.0.1 - Cross-Site Request Forgery to Log Clearing
Medium
CVE-2024-4755
Google CSE <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4384
CSSable Countdown <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-6382
Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4474
WP Logs Book <= 1.0.1 - Cross-Site Request Forgery to Log Disabling
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.