Medium
CVE-2024-1679
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-3550
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-33913
Xserver Migrator <= 1.6.2 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-33926
GWP-Histats <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33924
Realtyna Organic IDX plugin <= 4.14.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-33920
Democracy Poll <= 6.0.3 - Missing Authorization
Medium
CVE-2024-33928
CodeBard's Patron Button and Widgets for Patreon <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-4265
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2024-2797
MailerLite – Signup forms (official) <= 1.7.6 - Missing Authorization
Medium
CVE-2024-33938
Sliding Widgets <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-33918
AJAX Login and Registration modal popup + inline form <= 2.23 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-33953
Adventure Journal <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0848
AA Cash Calculator <= 1.0 - Reflected Cross-Site Scripting via invoice
Medium
CVE-2024-33916
CPO Companion <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3072
ACF Front End Editor <= 2.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Update
Medium
CVE-2024-33922
Media Cleaner: Clean your WordPress! <= 6.7.2 - Unauthenticated Information Exposure
Medium
CVE-2024-2109
Booster Extension <= 1.2.0 - Basic Information Exposure via booster_extension_authorbox_shortcode_display
Medium
CVE-2024-2967
Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor <= 4.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4133
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect
Medium
CVE-2024-1386
MailerLite – Signup forms (official) 1.5.0 - 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1809
Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Missing Authorization
Medium
CVE-2026-15287
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-1371
LeadConnector <= 1.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-2959
SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Edit/Creation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.