High
CVE-2024-25918
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-0326
Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via onClick Events
High
CVE-2024-24707
Cwicly <= 1.4.0.2 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2024-1447
Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1242
Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0838
Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0561
Ultimate Posts Widget <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1389
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return
Critical
CVE-2024-25600
Bricks <= 1.9.6 - Unauthenticated Remote Code Execution
Medium
CVE-2024-1273
Starbox <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1282
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-0438
Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1390
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page
Medium
CVE-2024-1058
SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1171
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Medium
CVE-2024-1172
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion
Critical
CVE-2024-25911
MoveTo <= 6.2 - Unauthenticated Directory Traversal to Arbitrary File Deletion
Medium
CVE-2024-25099
Paytium: Mollie payment forms & donations <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-1159
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
Medium
CVE-2024-1157
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
Medium
CVE-2024-25595
Defender Security <= 4.4.1 - IP Address Spoofing
High
CVE-2024-25095
Easy Forms for Mailchimp <= 6.8.10 - Sensitive Information Exposure via logfile
Medium
CVE-2024-1294
Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice
Medium
CVE-2024-25907
WP Media folder <= 5.7.2 - Missing Authorization to Authenticated(Subscriber+) Plugin settings change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.