High
CVE-2024-2848
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-30423
Better Elementor Addons <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2039
Stackable – Page Builder Gutenberg Blocks <= 3.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Posts Block
High
CVE-2023-6999
Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2024-30485
Finale Lite <= 2.18.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation
Medium
CVE-2024-30451
Geo Controller <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-2411
MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal
Medium
CVE-2024-0956
WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection
Medium
CVE-2024-30514
Paid Memberships Pro – Payfast Gateway Add On <= 1.4.1 - Unauthenticated Information Exposure
High
CVE-2024-1872
Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode
Medium
CVE-2024-30503
Mailster <= 1.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30434
WP-CRM System <= 3.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6965
Pods - Custom Content Types and Fields - Missing Authorization
Medium
CVE-2024-30517
Sliced Invoices <= 3.9.2 - Missing Authorization
Medium
CVE-2024-2844
Easy Appointments <= 3.11.18 - Insufficient Authorization
Medium
CVE-2024-30447
Creative Image Slider – Responsive Slider Plugin <= 2.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30470
YITH WooCommerce Account Funds Premium <= 1.33.0 - Missing Authorization
Medium
CVE-2024-30455
GamiPress <= 6.8.5 - Cross-Site Request Forgery
Medium
CVE-2024-30506
All In One Redirection <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-30439
Limit Attempts by BestWebSoft <= 1.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-30513
ProfileGrid <= 5.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-30422
Elementor Addon Elements <= 1.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-15295
Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-30453
Brave Popup Builder <= 0.6.5 - Unauthenticated Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.