Medium
CVE-2024-24932
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-25092
NextMove Lite <= 2.17.0 - Missing Authorization to Authenticated(Subscriber+) Plugin Activation
Medium
f6c5e3f8-ebbd-4cc3-b9b1-3f1704e3c07a
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) User Meta Disclosure
Medium
CVE-2024-24889
All 404 Pages Redirect to Homepage <= 1.9 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2024-1350
Honeypot for WP Comment <= 2.2.3 - Directory Traversal to Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-1316
Event Tickets and Registration <= 5.8.0 Events Tickets Plus <= 5.9.0 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2024-0657
Internal Link Juicer <= 2.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-6565
InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1319
Events Tickets Plus <= 5.9.0 - Missing Authorization to Information Exposure
Medium
CVE-2024-0442
Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-0842
Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service
Medium
CVE-2024-1122
Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export
Medium
CVE-2024-30468
All In One WP Security <= 5.2.6 - Cross-Site Request Forgery to IP Blocking
Medium
CVE-2024-0616
Passster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-1090
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in stopOptimizeAll
Medium
CVE-2024-0511
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta
Medium
CVE-2024-0965
Simple Page Access Restriction <= 1.0.21 - Improper Access Control to Sensitive Information Exposure via REST API
Medium
CVE-2024-0516
Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta
Medium
CVE-2024-0984
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in disableOptimization
Medium
CVE-2024-1336
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in optimizeAllOn
Medium
CVE-2024-1335
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in disableOptimization
Medium
CVE-2024-0512
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist
High
CVE-2024-1206
WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton
Medium
CVE-2024-0514
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.