Medium
CVE-2024-2112
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-2436
Lightweight Accordion <= 1.5.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-2202
Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget
Medium
CVE-2024-2165
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-2033
Video Conferencing with Zoom <= 4.4.5 - Sensitive Information Exposure
Medium
CVE-2023-6257
Inline Related Posts <= 3.5.0 - Information Exposure
Medium
CVE-2024-0957
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-2504
Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes
Medium
CVE-2024-2392
Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1999
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Widget
Medium
CVE-2024-2305
Cards for Beaver Builder <= 1.1.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via bootstrapcard link
High
CVE-2024-1893
Easy Property Listings <= 3.5.2 - Authenticated(Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-2500
ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
High
CVE-2024-1934
WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification
Medium
CVE-2024-1412
Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error
Medium
CVE-2024-2080
LiquidPoll – Polls, Surveys, NPS and Feedback Reviews <= 3.3.76 - Information Exposure
Medium
CVE-2024-2536
Rank Math SEO with AI SEO Tools <= 1.0.214 - Authenticated(Contributor+) Stored Cross-Site Scripting via HowTo block attributes
Medium
CVE-2024-1948
Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content
Medium
CVE-2024-1850
AI Post Generator | AutoWriter <= 3.3 - Missing Authorization
Critical
CVE-2024-2804
Network Summary <= 2.0.11 - Unauthenticated SQL Injection
Medium
CVE-2024-1637
360 Javascript Viewer <= 1.7.12 - Missing Authorization to Plugin Settings Update
Medium
CVE-2024-2311
Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-2341
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-4965
Invitation Code Content Restriction Plugin from CreativeMinds <= 1.5.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.