Medium
CVE-2024-33635
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-3890
Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget
Medium
CVE-2024-33637
Solid Affiliate <= 1.9.1 - Sensitive Information Exposure
Medium
CVE-2024-33537
WP Portfolio <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-33564
XStore <= 9.3.8 - Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2024-33584
Video Conferencing with Zoom <= 4.4.4 - Open Redirect
Medium
CVE-2024-33638
Smart Maintenance Mode <= 1.5.3 - Cross-Site Request Forgery
Medium
CVE-2024-33561
XStore <= 9.3.8 - Missing Authorization
Medium
CVE-2024-33587
Secure Copy Content Protection and Content Locking <= 3.9.0 - Missing Authorization
Medium
CVE-2024-33642
Advanced Post List <= 0.5.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-33551
XStore Core <= 5.3.8 - Unauthenticated SQL Injection
High
CVE-2024-1945
ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion
Medium
CVE-2024-33554
XStore Core <= 5.3.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-3823
Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-4086
CM Tooltip Glossary – Powerful Glossary Plugin <= 4.2.11 - Cross-Site Request Forgery
Medium
CVE-2024-3897
Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure
Medium
CVE-2024-3893
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion
Medium
CVE-2024-3747
Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block
Medium
CVE-2024-3607
PropertyHive <= 2.0.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
CVE-2024-3405
WP Prayer <= 2.0.9 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-3681
Interactive World Maps <= 2.4.14 - Reflected Cross-Site Scripting
Medium
CVE-2024-3824
Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Request Forgery to Setting Reset
Medium
CVE-2024-3406
WP Prayer <= 2.0.9 - Cross-Site Request Forgery to Email Settings Update
Medium
CVE-2024-3631
HL Twitter <= 2014.1.18 - Cross-Site Request Forgery to Twitter Account Unlink
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.