Critical
CVE-2024-24842
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-24835
BEAR <= 1.1.4 - Missing Authorization via Several Functions
Medium
CVE-2024-24805
WP Dummy Content Generator <= 3.1.2 - Missing Authorization
Medium
CVE-2024-24834
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
Medium
CVE-2024-24838
Five Star Restaurant Reviews <= 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Review URL
Medium
CVE-2023-7203
Smart Forms <= 2.6.86 - Missing Authorization
Medium
CVE-2024-0659
Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options
Medium
CVE-2024-24833
Happy Addons for Elementor <= 3.10.1 - Missing Authorization via add_row_actions
Medium
CVE-2024-24832
EventPrime <= 3.3.9 - Improper Input Validation via save_event_booking
Medium
CVE-2024-24840
Element Pack Elementor Addons <= 5.4.11 - Missing Authorization via bdt_duplicate_as_draft
High
CVE-2024-24869
Total Upkeep <= 1.15.8 - Improper Authorization to Unauthenticated Arbitrary File Download
Medium
CVE-2024-24847
CalculatorPro Calculators <= 1.1.7 - Reflected Cross-Site Scripting via CP_preview_calc
Medium
CVE-2024-0969
ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API
Medium
CVE-2024-0701
UserPro <= 5.1.6 - Disabled Membership Registration Bypass
Medium
CVE-2024-0963
Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-24841
Add Customer for WooCommerce <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1162
Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery
Medium
CVE-2024-0954
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1046
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0844
Popup More <= 2.2.4 - Authenticated (Admin+) Directory Traversal to Limited Local File Inclusion
Medium
CVE-2024-1047
ThemeIsle SDK <= Various Versions - Missing Authorization
Medium
CVE-2024-0685
Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection
Medium
CVE-2024-1073
SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-24799
WooCommerce Box Office <= 1.2.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.