Medium
CVE-2024-29929
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-2623
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29773
BizPrint <= 4.5.4 - Cross-Site Request Forgery to Cross-Site Scripting via process.php
Medium
CVE-2024-29794
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-29927
WishSuite <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-0399
WooCommerce Customers Manager <= 29.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-29760
Booster for WooCommerce <= 7.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-30186
Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via title
Medium
CVE-2024-2650
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29926
WC Builder <= 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1310
WooCommerce <= 8.5.2 - Missing Authorization to Private/Draft Product Disclosure
Medium
CVE-2024-29813
Funnel Builder by CartFlows <= 2.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-29805
Shipping with Venipak for WooCommerce <= 1.19.5 - Reflected Cross-Site Scripting via 'venipak_labels_link'
Medium
CVE-2024-29816
Woo Viet <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29798
Gratisfaction <= 4.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29812
ReviewX <= 1.6.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1697
Custom WooCommerce Checkout Fields Editor <= 1.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-2025
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request
Medium
CVE-2024-0626
WooCommerce Clover Payment Gateway <= 1.3.1 - Missing Authorization via callback_handler
Medium
CVE-2024-0957
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-2311
Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-2344
Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry
Medium
CVE-2024-2340
Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing
Medium
CVE-2024-2343
Avada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_action
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.