Medium
CVE-2024-31932
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-2966
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search
Medium
CVE-2024-31424
Login with phone number <= 1.6.93 - Cross-Site Request Forgery
Medium
CVE-2024-0710
GP Unique ID <= 1.5.5 - Unauthenticated Form Submission Unique ID Modification
Medium
CVE-2024-31381
Spotlight Social Media Feeds <= 1.6.10 - Cross-Site Request Forgery
Medium
CVE-2024-31925
F4 Improvements <= 1.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3285
Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows <= 3.70.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via metaslider Shortcode
Medium
CVE-2024-31374
AppPresser <= 4.3.0 - Cross-Site Request Forgery via force_logging_off()
Medium
CVE-2024-31942
Calendarista Basic Edition <= 3.0.2 - Cross-Site Request Forgery
High
CVE-2023-6811
Language Translate Widget for WordPress – ConveyThis <= 223 - Unauthenticated Stored Cross-Site Scripting via api_key
Medium
CVE-2024-31924
EWWW Image Optimizer <= 7.2.3 - Cross-Site Request Forgery
Medium
CVE-2024-31369
Soledad <= 8.4.5 - Cross-Site Request Forgery
Medium
CVE-2024-3210
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'reg-single-checkbox'
Medium
CVE-2024-31365
Post Type Builder <= 2.1.0 - Reflected Cross-Site Scripting
High
CVE-2024-4439
WordPress Core < 6.5.2 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block
Critical
CVE-2024-31370
AIKit <= 4.14.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-31372
No-Bot Registration <= 1.9.1 - Cross-Site Request Forgery
Medium
CVE-2024-2664
Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2665
Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
Medium
CVE-2024-32590
Kattene <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1780
BizCalendar Web <= 1.1.0.25 - Reflected Cross-Site Scripting via 'tab'
Medium
CVE-2024-1042
WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Missing Authorization via multiple AJAX actions
High
CVE-2023-6964
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF)
Medium
CVE-2024-3235
Essential Grid <= 3.1.1 - Unauthenticated Private Post Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.