Medium
CVE-2024-1110
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-0379
Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update
Low
CVE-2024-0628
WP RSS Aggregator <= 4.23.5 - Authenticated (Admin+) Server-Side Request Forgery via RSS Feed Source
Medium
CVE-2023-6806
Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings
Medium
CVE-2024-1055
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0977
Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-24874
CP Polls <= 1.0.71 - Unauthenticated Content Injection
Medium
CVE-2024-24871
Blocksy <= 2.0.19 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-24887
Contest Gallery <= 21.2.8.4 - Cross-Site Request Forgery
Medium
CVE-2024-24884
Contact Form 7 Connector <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2024-24878
Portugal CTT Tracking for WooCommerce <= 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-24879
Link Library <= 7.5.13 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'
Medium
CVE-2024-1121
Advanced Forms for ACF <= 1.9.3.2 - Missing Authorization to Unauthenticated Form Settings Export
Low
CVE-2024-1075
Minimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypass
Medium
CVE-2024-24877
Wonder Slider Lite <= 13.9 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2024-0509
WP 404 Auto Redirect to Similar Post <= 1.0.3 - Reflected Cross-Site Scripting via request
Medium
CVE-2024-0834
Elementor Addon Elements <= 1.12.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-24883
Prime Slider – Addons For Elementor <= 3.11.10 - Incorrect Authorization via bdt_duplicate_as_draft
Medium
CVE-2024-24872
Themify Builder <= 7.0.5 - Cross-Site Request Forgery
Medium
CVE-2024-1177
WP Club Manager – WordPress Sports Club Plugin <= 2.2.10 - Missing Authorization to Unauthenticated Event Permalink Update
Medium
CVE-2024-0835
Royal Elementor Kit <= 1.0.116 - Missing Authorization to Arbitrary Transient Update
Medium
CVE-2024-1106
Shariff Wrapper <= 4.6.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-24880
Apollo13 Framework Extensions <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-24881
WP SMS <= 6.5.2 - Reflected Cross-Site Scripting via 'page'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.