Medium
CVE-2024-4865
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-4621
ARforms <= 6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-4442
Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-34764
Essential Addons for Elementor <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34789
Post Grid Elementor Addon <= 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag
Medium
CVE-2024-34766
ChaosTheory <= 1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-34790
ImageMagick Sharpen Resized Images <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-34767
ShopLentor <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34804
Tagembed <= 5.8 - Missing Authorization
Medium
CVE-2024-2697
Swift Framework < 2024.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4756
WP Backpack <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-35162
Download Plugins and Themes from Dashboard <= 1.8.5 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2024-3288
Logo Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4709
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4698
Testimonial Carousel For Elementor <= 10.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34769
Elegant Blocks <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5003
WP Stacker <= 1.8.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-34791
WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5088
Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34770
Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2024-4620
ARForms Form Builder <= 6.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-34768
Fastly <= 1.2.25 - Missing Authorization via AJAX actions
Medium
CVE-2024-4789
Cost Calculator Builder Pro <= 3.1.72 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2024-3551
Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.