Medium
CVE-2024-2107
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2024-2395
Bulgarisation for WooCommerce <= 3.0.14 - Cross-Site Request Forgery
Medium
CVE-2024-1535
ProfilePress <= 4.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1213
Easy Social Feed <= 6.5.4 - Cross-Site Request Forgery
Medium
CVE-2023-4839
WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1507
Prime Slider – Addons For Elementor <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix Widget
Medium
CVE-2024-2031
Video Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1503
Tutor LMS – eLearning and online course solution <= 2.6.1 - Cross-Site Request Forgery to Plugin Deactivation and Data Erase
Medium
CVE-2024-1450
Shariff Wrapper <= 4.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1751
Tutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-4629
LadiApp <= 4.4 - Cross-Site Request Forgery via save_config()
High
CVE-2024-2194
WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-4729
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via publish_lp()
Medium
CVE-2023-4627
LadiApp <= 4.4 - Missing Authorization via save_config()
Medium
CVE-2024-1080
Beaver Builder – WordPress Page Builder <= 2.7.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via heading tag
High
CVE-2023-5663
News Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-1526
Hubbub Lite <= 1.31.0 - Unauthenticated Information Exposure
Medium
CVE-2024-2262
Themify – WooCommerce Product Filter <= 1.4.3 - Cross-Site Request Forgery
Medium
CVE-2024-1237
Elementor Header & Footer Builder <= 1.6.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2293
Site Reviews <= 6.11.4 - Authenticated(Subscriber+) Stored Cross-Site Scripting via display name
Medium
CVE-2024-1537
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table
Medium
CVE-2024-0906
f(x) Private Site <= 1.2.1 - Sensitive Information Exposure
Medium
CVE-2024-1328
Newsletter2Go <= 4.0.14 - Authenticated(Subscriber+) Stored Cross-Site Scripting via style
Medium
CVE-2023-4728
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Missing Authorization on publish_lp()
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.