Medium
CVE-2024-30549
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2024-31115
Chauffeur Taxi Booking System for WordPress <= 7.2 - Unauthenticated Arbitrary File Upload
High
CVE-2024-2047
ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw
Medium
CVE-2024-30552
Responsive flipbook <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2513
WP Chat App <= 3.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Image Attribute
Medium
CVE-2024-2948
Favorites <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-31103
Kanban Boards for WordPress <= 2.5.21 - Reflected Cross-Site Scripting
High
CVE-2024-3018
Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword
Medium
CVE-2024-30556
Mighty Classic Pros And Cons <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31118
SP Project & Document Manager <= 4.70 - Missing Authorization Stored Cross-Site Scripting
Medium
CVE-2024-24888
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2024-2143
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget
High
CVE-2024-1794
Forminator <= 1.29.0 - Unauthenticated Stored Cross-Site Scripting via File Upload
Medium
CVE-2024-2491
PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag*
Medium
CVE-2024-31087
pageMash > Page Management <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-30558
Add Shortcodes Actions And Filters <= 2.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-30524
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31120
Responsive Image Gallery, Gallery Album <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-30533
Layouts for Elementor <= 1.7 - Missing Authorization to Unauthenticated Arbitrary File Upload
Medium
CVE-2024-30543
Whizzy <= 1.1.18 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-31110
Contact Form 7 Newsletter <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-30550
Responsive Image Gallery, Gallery Album <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30537
WPC Badge Management for WooCommerce <= 2.4.0 - Missing Authorization
Medium
CVE-2024-31093
Broken Images <= 0.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.