Medium
CVE-2024-23510
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-0366
Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference
Medium
CVE-2024-0836
WordPress Review & Structure Data Schema Plugin – Review Schema <= 2.1.14 - Missing Authorization to Arbitrary Review Update
Medium
ab2a4903-2c69-48da-bd4a-79b39b78806c
Custom Order Status for WooCommerce <= 2.3.0 - Cross-Site Request Forgery
Medium
CVE-2024-23520
PopupAlly <= 2.1.0 - Cross-Site Request Forgery via optin_submit_callback
Medium
CVE-2024-23514
Click To Tweet <= 2.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-23517
Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0790
WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Cross-Site Request Forgery
Medium
CVE-2023-7202
Fatal Error Notify <= 1.5.2 - Missing Authorization to Test Error Email Sending
Medium
4fc76e1c-546f-4ecd-bd3b-a6f21b2c65bf
BizPrint <= 4.5.1 - Missing Authorization in showTemplatePreview
Medium
487a131e-4911-42d6-bfd7-fc697c89552d
BizPrint <= 4.5.1 - Cross-Site Request Forgery in Printer Management
Critical
CVE-2024-23512
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks <= 3.1.4 - PHP Object Injection via wopb_wishlist and wopb_compare
Medium
CVE-2024-0859
Affiliates Manager <= 2.9.34 - Cross-Site Request Forgery
Medium
CVE-2023-7167
Persian Fonts <= 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-23515
Post Video Players <= 1.159 - Cross-Site Request Forgery via cincopa_mp_mt_options_page
Medium
CVE-2024-0791
WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Missing Authorization
High
CVE-2024-1069
Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
08b75cac-7b1d-4bed-a1b7-bd1e872f2b4f
Fatal Error Notify <= 1.5.2 - Cross-Site Request Forgery to Test Error Email Sending
Medium
CVE-2023-7225
MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings
Medium
CVE-2024-31941
CP Media Player <= 1.1.3 - Cross-Site Request Forgery to Player Deletion and Duplication
Medium
CVE-2024-0597
SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2024-0678
Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-0961
SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-6700
Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.