Medium
CVE-2024-24837
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-1209
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
Medium
CVE-2024-1210
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
Medium
CVE-2024-24849
Quicksand Post Filter jQuery Plugin <= 3.1.1 - Cross-Site Request Forgery via renderAdmin
Medium
CVE-2024-24846
Mighty Addons for Elementor <= 1.9.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-24842
Knowledge Base for Documentation, FAQs with AI Assistance <= 11.30.2 - Unauthenticated PHP Object Injection in is_article_recently_viewed
Medium
CVE-2024-24835
BEAR <= 1.1.4 - Missing Authorization via Several Functions
Medium
CVE-2024-24805
WP Dummy Content Generator <= 3.1.2 - Missing Authorization
Medium
CVE-2024-24834
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
Medium
CVE-2024-24838
Five Star Restaurant Reviews <= 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Review URL
Medium
CVE-2023-7203
Smart Forms <= 2.6.86 - Missing Authorization
Medium
CVE-2024-0659
Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options
Medium
CVE-2024-24833
Happy Addons for Elementor <= 3.10.1 - Missing Authorization via add_row_actions
Medium
CVE-2024-24832
EventPrime <= 3.3.9 - Improper Input Validation via save_event_booking
Medium
CVE-2024-24840
Element Pack Elementor Addons <= 5.4.11 - Missing Authorization via bdt_duplicate_as_draft
High
CVE-2024-24869
Total Upkeep <= 1.15.8 - Improper Authorization to Unauthenticated Arbitrary File Download
Medium
CVE-2024-24847
CalculatorPro Calculators <= 1.1.7 - Reflected Cross-Site Scripting via CP_preview_calc
Medium
CVE-2024-0969
ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API
Medium
CVE-2024-0701
UserPro <= 5.1.6 - Disabled Membership Registration Bypass
Medium
CVE-2024-0963
Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-24841
Add Customer for WooCommerce <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1162
Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery
Medium
CVE-2024-0954
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1046
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.