Medium
CVE-2024-3734
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-3647
Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style'
Medium
CVE-2024-3733
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure
Medium
CVE-2024-3407
WP Prayer <= 2.0.9 - Cross-Site Request Forgery to Arbitrary Prayer Deletion
Medium
CVE-2024-3994
Tutor LMS – eLearning and online course solution <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tutor_instructor_list' Shortcode
High
CVE-2024-3045
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-3728
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle
Medium
CVE-2024-32584
TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.5.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Medium
CVE-2024-4003
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-3047
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-3822
Base64 Encoder/Decoder <= 0.9.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-3630
HL Twitter <= 2014.1.18 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4035
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.21 - Authenticated (Author+) Cross-Site Scripting
Medium
CVE-2024-3629
HL Twitter <= 2014.1.18 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-3748
SP Project & Document Manager <= 4.71 - Insecure Direct Object Reference
Medium
CVE-2024-2324
FileOrganizer and FileOrganizer Pro <= 1.0.6 - Authenticated Stored Cross-Site Scripting
High
CVE-2024-32960
Booking Ultra Pro <= 1.1.12 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2023-7030
Collapse-O-Matic <= 1.8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4077
UDesign <= 4.7.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-32958
Slash Admin <= 3.8.1 - Cross-Site Request Forgery
Medium
CVE-2024-32957
Page Builder: Live Composer <= 1.5.38 - Missing Authorization
High
CVE-2024-3895
WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2024-3885
Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3241
Ultimate Blocks <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.