Medium
CVE-2024-0855
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
43810a17-89b4-44f5-887e-1ad0989ea5b4
WooCommerce < 8.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-22027
Quiz Maker <= 6.5.0.5 - Denial of Service
Medium
CVE-2023-52200
ARMember <= 4.0.22 - Cross-Site Request Forgery
Medium
CVE-2023-7154
Hubbub Lite <= 1.31.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-7083
Voting Record <= 2.0 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting
High
CVE-2024-22140
Profile Builder Pro <= 3.10.0 - Cross-Site Request Forgery
Medium
CVE-2023-6005
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2023-6875
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API
Medium
CVE-2024-31276
Products & Order Export for WooCommerce <= 2.0.7 - Missing Authorization
Medium
CVE-2024-0235
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Missing Authorization via get_virtual_users
Medium
CVE-2023-6824
WP Customer Area <= 8.2.0 - Insecure Direct Object Reference to Account Address Disclosure
High
CVE-2023-5448
WP Register Profile With Shortcode <= 3.5.9 - Cross-Site Request Forgery to User Password Reset
Low
CVE-2023-49748
WPS Hide Login <= 1.9.11 - Hidden Login Page Location Disclosure
Medium
CVE-2024-0239
Contact Form 7 Connector <= 1.2.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-0236
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Missing Authorization via config_virtual_event
Medium
CVE-2024-22137
Constant Contact Forms by MailMunch <= 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-22139
WordPress Manutenção <= 1.0.6 - IP Spoofing to Maintenance Mode Bypass
Medium
CVE-2023-6630
Contact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object Reference
Medium
CVE-2024-22141
Profile Builder Pro <= 3.10.0 - Authenticated (Subscriber+) Time-Based One-Time Password Sensitive Information Exposure
Medium
CVE-2024-21750
Shortcodes Finder <= 1.5.4 - Reflected Cross-Site Scripting via nonce
Medium
CVE-2024-0233
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Reflected Cross-Site Scripting
Medium
5c24ee66-7b57-4e4c-bbb5-0451fc24ce4b
Newsletter <= 8.0.6 - Cross-Site Request Forgery
Medium
CVE-2024-22142
Profile Builder Pro <= 3.10.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.