Medium
CVE-2024-0844
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-1047
ThemeIsle SDK <= Various Versions - Missing Authorization
Medium
CVE-2024-0685
Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection
Medium
CVE-2024-1073
SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-24799
WooCommerce Box Office <= 1.2.2 - Missing Authorization
Medium
CVE-2023-7204
WP STAGING WordPress Backup Plugin < 3.2.0 - Sensitive Information Exposure via cache files
Medium
CVE-2024-1130
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()
Medium
CVE-2024-24804
MW WP Form <= 5.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-6389
WordPress Toolbar Plugin <= 2.2.6 - Open Redirect via wptbto
Low
CVE-2024-24710
Feed Them Social <= 4.2.0 - Cross-Site Request Forgery via review_nag_check
Medium
CVE-2024-24708
W3SPEEDSTER <= 7.19 - Cross-Site Request Forgery via launch
Medium
CVE-2023-7200
EventON <= 4.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-24717
Beds24 Online Booking <= 2.0.23 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5124
Pagelayer <= 1.7.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via Header/Footer code
Medium
CVE-2024-24713
Auto Listings <= 2.6.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-24798
Debug <= 1.10 - Cross-Site Request Forgery
Medium
CVE-2024-24706
WP-CFM <= 1.7.8 - Cross-Site Request Forgery via multiple AJAX functions
High
CVE-2023-6279
Woostify Sites Library <= 1.4.7 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Medium
CVE-2024-24702
Page Restrict <= 2.5.5 - Cross-Site Request Forgery via pr_admin_page
High
CVE-2024-23825
TablePress <= 2.2.4 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files
Medium
CVE-2024-24802
JTRT Responsive Tables <= 4.1.9 - Cross-Site Request Forgery
Medium
CVE-2024-24718
PropertyHive <= 2.0.6 - Missing Authorization via activate_pro_feature
Medium
CVE-2024-24704
Load More Anything <= 3.3.3 - Missing Authorization to Plugin Settings Modification
High
CVE-2024-1072
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.15.21 - Missing Authorization via seedprod_lite_new_lpage
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.