High
CVE-2024-27955
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-1641
Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication
Medium
CVE-2024-2185
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget
Medium
CVE-2024-2187
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget
Medium
CVE-2024-24716
Awesome Support <= 6.1.6 - Insufficient Authorization via wpas_can_delete_attachments()
High
CVE-2023-7072
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint
Medium
CVE-2024-1894
Burst Statistics – Privacy-Friendly Analytics for WordPress <= 1.5.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via burst_total_pageviews_count
High
CVE-2024-0386
weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer
High
CVE-2024-0368
Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys
Medium
CVE-2024-2130
CWW Companion <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-22144
Anti-Malware Security and Brute-Force Firewall <= 4.21.96 - Unauthenticated Remote Code Execution
Medium
CVE-2024-2286
Sky Addons for Elementor <= 2.4.0 - Authenticated(Contributor+) Stored Cross-site scripting via Wrapper Link URL
Medium
CVE-2023-6500
Shariff Wrapper <= 4.6.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-0683
Bulgarisation for WooCommerce <= 3.0.14 - Missing Authorization
Medium
CVE-2024-1278
Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2015-10130
Team Circle Image Slider With Lightbox 1.0 - Cross-Site Request Forgery
Medium
CVE-2024-1214
Easy Social Feed <= 6.5.4 - Cross-Site Request Forgery
Medium
CVE-2024-1421
HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget
Medium
CVE-2024-1397
HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag
Medium
CVE-2024-0966
Shariff Wrapper <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1502
Tutor LMS – eLearning and online course solution <= 2.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
CVE-2024-1508
Prime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget
Medium
CVE-2024-2369
Page Builder Gutenberg Blocks – CoBlocks <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1582
WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.