Medium
CVE-2024-34427
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-4411
Mihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-34425
QuickieBar <= 1.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4314
hostel <= 1.1.5.3 - Cross-Site Request Forgery
Critical
CVE-2024-4186
Edwiser Bridge <= 3.0.5 - Authentication Bypass due to Missing Empty Value Check
Medium
CVE-2024-34419
Configure Login Timeout <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4446
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagingType Parameter
Medium
CVE-2023-6810
ClickCease Click Fraud Protection <= 3.2.4 - Improper Authorization to sensitive information exposure via get_settings
Medium
CVE-2024-4041
Yoast SEO <= 22.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-1166
Image Hover Effects - Elementor Addon <= 1.4.1 - Authenticated(Contributor+) DOM-based Stored Cross-Site Scripting via Image Hover Effects Widget
Medium
CVE-2024-34387
WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.6.4 - Missing Authorization to Rating Manipulation
Medium
CVE-2024-34426
Brozzme Scroll Top <= 1.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3939
Ditty <= 3.1.35 - Authenticated (Author+) Stored Cross-Site Scripting
Critical
CVE-2024-4345
Startklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-34430
TT Custom Post Type Creator <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-34390
Post Grid Master <= 3.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-34386
Auto Affiliate Links <= 6.4.3.1 - Authenticated (Editor+) SQL Injection
Medium
CVE-2024-34417
Viet Nam Affiliate <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4532
Business Card <= 1.0.0 - Cross-Site Request Forgery to Arbitrary Card Deletion
Medium
CVE-2024-34421
BlogLentor <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34367
Popup box <= 4.1.2 - Cross-Site Request Forgery
High
CVE-2024-3240
ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-34380
Conversational Forms for ChatBot <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-34381
PropertyHive <= 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.