Medium
CVE-2024-2839
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-1807
Product Sort and Display for WooCommerce <= 2.4.1 - Missing Authorization
Medium
CVE-2024-2334
Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload
Medium
CVE-2024-1732
Sharkdropship for AliExpress Dropshipping and Affiliate <= 2.2.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-1504
SecuPress Free — WordPress Security <= 2.2.5.1 - Cross-Site Request Forgery to Banned IP Address
Medium
CVE-2024-2924
Creative Addons for Elementor <= 1.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2125
EnvíaloSimple: Email Marketing y Newsletters <= 2.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-2791
Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets
Medium
CVE-2023-7252
Tickera – WordPress Event Ticketing <= 3.5.2.4 - Insecure Direct Object Reference to Information Exposure
Medium
CVE-2024-2931
WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure
High
CVE-2024-1852
WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-31097
SEO Title Tag <= 3.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-31088
AdsPlace'r – Ad Manager, Inserter, AdSense Ads <= 1.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-31095
Thumbs Rating <= 5.1.0 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2024-2456
Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-30539
Awesome Support <= 6.1.7 - Missing Authorization
Medium
CVE-2024-30511
FG PrestaShop to WooCommerce <= 4.45.1 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2024-31084
Weekly Class Schedule <= 3.19 - Reflected Cross-Site Scripting
Medium
CVE-2024-31092
Comic Easel <= 1.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-30547
Header Image Slider <= 0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-1238
ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31112
Convert Post Types <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-30541
LWS Optimize <= 1.9.1 - Cross-Site Request Forgery
Medium
CVE-2024-30526
Easy Social Feed <= 6.5.6 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.