Medium
CVE-2024-1108
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-1081
3D FlipBook – PDF Flipbook WordPress <= 1.15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks
Medium
CVE-2024-25929
Product Catalog Enquiry for WooCommerce by MultiVendorX <= 5.0.5 - Cross-Site Request Forgery via REST API
Critical
CVE-2024-0365
Fancy Product Designer <= 6.1.4 - Authenticated (Admin+) SQL Injection
High
CVE-2024-25933
PeproDev Ultimate Invoice <= 1.9.7 - Unauthenticated Sensitive Information Exposure via init_plugin
Medium
CVE-2024-0591
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.
Medium
CVE-2024-0780
Enjoy Social Feed plugin for WordPress website <= 6.2.2 - Missing Authorization to Database Reset
Medium
CVE-2024-0559
Enhanced Text Widget <= 1.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-25932
Change Table Prefix <= 2.0 - Cross-Site Request Forgery via change_prefix_form
Medium
CVE-2024-0951
Advanced Social Feeds Widget & Shortcode <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-0719
Tabs Shortcode and Widget <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-7236
Backup Bolt <= 1.3.0 - Sensitive Information Exposure
Medium
CVE-2024-25931
Heureka <= 1.0.8 - Cross-Site Request Forgery
Medium
CVE-2024-25935
RegistrationMagic <= 5.2.5.9 - Cross-Site Request Forgery
Medium
CVE-2024-0871
Beaver Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget
Medium
CVE-2024-1128
Tutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&A
Medium
CVE-2024-0897
Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1448
Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0602
Yet Another Related Posts Plugin (YARPP) <= 5.30.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-0593
Simple Job Board <= 2.10.8 - Missing Authorization to Unauthenticated Information Disclosure
Medium
CVE-2023-6821
Error Log Viewer <= 1.1.2 - Sensitive Information Exposure
Medium
CVE-2024-1510
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode
Medium
CVE-2024-1218
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization
High
CVE-2024-1290
Formidable Registration <= 2.11 - Authenticated (Contributor+) Arbitrary User Password Reset To Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.