Medium
CVE-2024-1380
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-0828
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization
Medium
CVE-2024-1409
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via [reg-select-role] Shortcode
Medium
CVE-2024-1779
Admin side data storage for Contact Form 7 plugin <= 1.1.1 - Missing Authorization to Unauthenticated Read Status Update
Medium
CVE-2024-1361
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder
Medium
CVE-2024-1393
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widget
High
CVE-2024-1505
Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-1053
Event Tickets and Registration <= 5.8.1 - Missing Authorization
Medium
CVE-2024-0903
User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1391
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget
Medium
CVE-2024-1462
Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST API
Medium
CVE-2024-1422
Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet
Medium
CVE-2024-0973
Widget for Social Page Feeds <= 6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-0820
Jobs for WordPress <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1392
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget
High
CVE-2024-1358
Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion
Medium
CVE-2024-1370
Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-1133
Tutor LMS <= 2.6.0 - Missing Authorization
Medium
CVE-2024-0858
Innovs HR – Complete Human Resource Management System for Your Business <= 1.0.3.4 - Cross-Site Request Forgery
Medium
CVE-2024-1562
WooCommerce Google Sheet Connector <= 1.3.11 - Missing Authorization
Medium
CVE-2024-1038
Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Reflected (DOM-Based) Cross-Site Scripting
Medium
CVE-2024-0821
Cost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce <= 3.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-7085
Scalable Vector Graphics (SVG) <= 3.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-0779
Enjoy Social Feed <= 6.2.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.