Medium
CVE-2024-34550
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-34564
Counter Up – Animated Number Counter & Milestone Showcase <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34557
Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Cross-Site Request Forgery
Medium
CVE-2024-34438
Shared Files <= 1.7.19 - Missing Authorization
High
CVE-2024-34554
Stockholm Core <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-34573
Pootle Pagebuilder – WordPress Page builder <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4339
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34549
WP Job Manager <= 2.2.2 - Unauthenticated Information Exposure
Medium
CVE-2024-34439
DS Site Message <= 1.14.4 - Cross-Site Request Forgery
Medium
CVE-2024-34432
Better Elementor Addons <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4312
Soccer Engine – Soccer Plugin for WordPress <= 1.12 - Cross-Site Request Forgery
Medium
CVE-2024-4135
WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-3494
Mesmerize Companion <= 1.6.148 - Authenticated (Contributor+) Stored Cross-Site Scripting via mesmerize_contact_form Shortcode
Medium
CVE-2024-34546
Sticky Social Link <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3952
Advanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget
Medium
CVE-2024-34559
Ghost <= 1.4.0 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-4606
Ultimate Store Kit Elementor Addons <= 2.0.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-4281
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
Critical
CVE-2024-4393
Social Connect <= 1.2 - Authentication Bypass
Medium
CVE-2024-34562
Move Addons for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34445
SKT Addons for Elementor <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Page Title
Medium
CVE-2024-1693
SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update
Medium
CVE-2024-34553
Stockholm Core <= 2.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-34556
Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.