Critical
CVE-2024-35630
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-3236
Popup Builder <= 1.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35631
FV Flowplayer Video Player <= 7.5.45.7212 - Reflected Cross-Site Scripting
Medium
CVE-2024-35632
Integration for Contact Form 7 and Constant Contact <= 1.1.5 - Cross-Site Request Forgery
Medium
CVE-2024-4305
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.0.4 - Authenticated (Contributor+) Stored Cross=Site Scripting
Medium
CVE-2024-35651
WP Flow Plus <= 5.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-35629
Easy Digital Downloads – Recent Purchases <= 1.0.2 - Unauthenticated Remote File Inclusion
High
CVE-2024-35634
Woocommerce – Recent Purchases <= 1.0.1 - Authenticated (Admin+) Local File Inclusion
Critical
CVE-2024-6159
Push Notification for Post and BuddyPress <= 1.93 - Unauthenticated SQL Injection
Medium
CVE-2024-4045
Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation <= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5218
Reviews and Rating – Google Reviews <= 5.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-4858
Testimonial Carousel For Elementor <= 10.2.0 - Missing Authorization to Limited Setting Update
Medium
CVE-2024-5229
Primary Addon for Elementor <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
Medium
CVE-2024-5220
ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-4270
SVGMagic <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
High
CVE-2024-3966
Pray For Me <= 1.0.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-4480
WP Prayer II <= 2.4.7 - Cross-Site Request Forgery to Email Settings Update
Medium
CVE-2024-3993
AZAN Plugin <= 0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-35297
WP Booking <= 2.4.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2024-3992
Amen <= 3.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4005
Social Pixel <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4271
SVGator – Add Animated SVG Easily <= 1.2.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-1295
The Events Calendar Free & Pro <= 6.4.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Events Access
Medium
CVE-2024-3965
Pray For Me <= 1.0.4 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.