Medium
CVE-2024-51670
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-51684
W3P SEO <= 1.8.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-51645
ThemeFuse Maintenance Mode <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-51667
Paytium <= 4.4.10 - Missing Authorization
Medium
CVE-2024-9655
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget
Medium
CVE-2024-51593
Курс валют UAH <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10482
Media Library Tools <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2024-51582
WP Hotel Booking <= 2.2.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-10677
BTEV <= Cross-Site Request Forgery to Plugin Settings Update
Critical
CVE-2024-10392
AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-10544
Woo Manage Fraud Orders <= 2.6.1 - Unauthenticated Information Exposure via Log Files
Critical
CVE-2024-50526
Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload
High
CVE-2024-50530
Stars SMTP Mailer <= 1.7 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-50529
Training – Courses <= 2.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-50533
Domain Sharding <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-10399
Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-9886
WP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-10103
MailPoet <= 5.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-50550
LiteSpeed Cache <= 6.5.1 - Unauthenticated Privilege Escalation
Medium
CVE-2024-4665
EventPrime – Events Calendar, Bookings and Tickets <= 3.5.0 - Insecure Direct Object Reference to (Subscriber+) Arbitrary Booking Update
High
CVE-2024-50508
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Download
High
CVE-2024-10436
WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2024-50506
Marketing Automation by AZEXO <= 1.27.80 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-10266
Premium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.