Medium
CVE-2024-3285
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-31374
AppPresser <= 4.3.0 - Cross-Site Request Forgery via force_logging_off()
Medium
CVE-2024-31942
Calendarista Basic Edition <= 3.0.2 - Cross-Site Request Forgery
High
CVE-2023-6811
Language Translate Widget for WordPress – ConveyThis <= 223 - Unauthenticated Stored Cross-Site Scripting via api_key
Medium
CVE-2024-31924
EWWW Image Optimizer <= 7.2.3 - Cross-Site Request Forgery
Medium
CVE-2024-31369
Soledad <= 8.4.5 - Cross-Site Request Forgery
Medium
CVE-2024-3210
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'reg-single-checkbox'
Medium
CVE-2024-31365
Post Type Builder <= 2.1.0 - Reflected Cross-Site Scripting
High
CVE-2024-4439
WordPress Core < 6.5.2 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block
High
CVE-2024-3020
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injection
Critical
CVE-2024-31370
AIKit <= 4.14.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-31372
No-Bot Registration <= 1.9.1 - Cross-Site Request Forgery
Medium
CVE-2024-2664
Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2665
Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
Medium
CVE-2024-32590
Kattene <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1780
BizCalendar Web <= 1.1.0.25 - Reflected Cross-Site Scripting via 'tab'
Medium
CVE-2024-1042
WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Missing Authorization via multiple AJAX actions
High
CVE-2023-6964
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF)
Medium
CVE-2024-3235
Essential Grid <= 3.1.1 - Unauthenticated Private Post Disclosure
Medium
CVE-2024-2736
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
Medium
CVE-2024-31371
WP Event Aggregator <= 1.7.6 - Cross-Site Request Forgery via wpea_deauthorize_user()
High
CVE-2023-7046
WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score <= 7.0 - Sensitive Information Exposure via insufficiently protected files
Medium
CVE-2024-2735
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element
Medium
CVE-2024-2655
Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.