Medium
CVE-2024-53783
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-10780
Restaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10670
Primary Addon for Elementor <= 1.6.2 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10798
Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11009
Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) <= 1.2.1 - Authenticated (Administrator+) SQL Injection via post_id Parameter
Medium
CVE-2024-11083
ProfilePress <= 4.15.18 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
High
CVE-2024-10570
Security & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection
Medium
CVE-2024-5333
The Events Calendar <= 6.8.2 - Missing Authorization to Unauthenticated Password Protected Event Disclosure
Medium
CVE-2024-8899
Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template
Medium
CVE-2024-10868
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10666
Easy Twitter Feed – Twitter feeds plugin for WP <= 1.2.6 - Authenticated (Contributor+) Post Exposure
Medium
CVE-2024-10499
AI Engine <= 2.6.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-11088
Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor
High
CVE-2024-10400
Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter
Medium
CVE-2024-10671
Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11089
Anonymous Restricted Content <= 1.6.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-10782
Theme Builder For Elementor <= 1.2.2 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10796
If-So Dynamic Content Personalization <= 1.9.2.1 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-9542
Sky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template
Medium
CVE-2024-52495
Distance Based Shipping Calculator <= 2.0.23 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-10316
Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-10365
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-11154
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-11179
MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.