Medium
CVE-2024-2974
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-31108
iFlyChat – WordPress Chat <= 4.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31089
Platinum SEO <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-30529
Tainacan <= 0.20.7 - Missing Authorization
Medium
CVE-2024-31090
Hacklog Down As PDF <= 2.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-31117
WooCommerce Bookings Calendar <= 1.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31107
OpenID <= 3.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-31123
SpiderFAQ <= 1.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-31104
GetResponse for WordPress <= 5.5.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31096
Nictitate <= 1.1.4 - Cross-Site Request Forgery
Medium
CVE-2024-30553
WP Twitter Mega Fan Box Widget <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-31085
Post-Plugin Library <= 2.6.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-2141
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Medium
CVE-2024-30545
Social Author Bio <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-2144
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget
Medium
CVE-2024-31102
Prenotazioni <= 1.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-30540
VS Contact Form <= 14.7 - CAPTCHA Bypass
High
CVE-2024-30532
Builderall Builder for WordPress <= 2.0.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-31119
Special Box for Content <= 1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-31106
Yoo Slider <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-0367
Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link
Medium
CVE-2024-30538
DELUCKS SEO <= 2.5.4 - Missing Authorization
Medium
CVE-2024-30527
WP Express Checkout (Accept PayPal Payments) <= 2.3.7 - Unauthenticated Price Manipulation
Critical
CVE-2024-30535
Easy Form Builder <= 3.7.4 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.