Medium
CVE-2024-1904
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-1239
ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1795
HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-2399
Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2335
Elements Plus! <= 2.16.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links
High
CVE-2024-1991
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.0.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-1796
HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1571
WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed
Medium
CVE-2024-2249
LA-Studio Element Kit for Elementor <= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1960
ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link
Medium
CVE-2024-2423
UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-2256
oik <= 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-2138
JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget
High
CVE-2024-27985
PropertyHive <= 2.0.9 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-27967
DSGVO All in one for WP <= 4.3 - Cross-Site Request Forgery
Medium
CVE-2024-27961
AntiSpam for Contact Form 7 <= 0.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-27959
APIExperts Square for WooCommerce <= 4.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-27953
Cryptocurrency Widgets – Price Ticker & Coins List <= 2.6.8 - Missing Authorization
Medium
CVE-2024-27966
Quiz And Survey Master <= 8.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1458
Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget
Critical
CVE-2024-27971
Premmerce Permalink Manager for WooCommerce <= 2.3.10 - Unauthenticated Local File Inclusion
Medium
CVE-2024-27962
wp-mpdf <= 3.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-1461
Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget
Medium
CVE-2024-27970
WP SendFox <= 1.3.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.