Medium
CVE-2024-29777
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-29921
Photo Gallery by Supsystic <= 1.15.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29819
WPFront Notification Bar <= 3.3.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-29812
ReviewX <= 1.6.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29788
Podlove Web Player <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29764
Molongui <= 4.7.7 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-30201
WordPress Importer <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-29758
Co-marquage service-public.fr <= 0.5.72 - Reflected Cross-Site Scripting via search_term
Medium
CVE-2024-2732
Themify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30199
WP-Lister Lite for Amazon <= 2.6.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-29925
Post Grid, Slider & Carousel Ultimate <= 1.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29936
Image Hover Effects – Elementor Addon <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'eihe_align'
Medium
CVE-2024-29930
Crypto Converter Widget <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
High
CVE-2024-28850
WP Crontrol <= 1.16.1 - Remote Code Execution
Medium
CVE-2024-2583
Shortcodes Ultimate <= 7.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_color' Shortcode
Medium
CVE-2024-2131
Move Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2468
EmbedPress <= 3.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Attribute
Medium
CVE-2024-2688
EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Authenticated (Contributor+) Stored Cross-site Scripting via 'embedpress_doc_custom_color'
Medium
CVE-2026-15297
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting
Medium
CVE-2024-1697
Custom WooCommerce Checkout Fields Editor <= 1.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-2326
Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update
High
CVE-2024-2025
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request
Medium
CVE-2024-0626
WooCommerce Clover Payment Gateway <= 1.3.1 - Missing Authorization via callback_handler
Medium
CVE-2024-1049
Page Builder Gutenberg Blocks – CoBlocks <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.