Medium
CVE-2024-43343
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2023-0714
Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload
Medium
CVE-2024-43347
Button contact VR <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-43354
myCred <= 2.7.2 - Unauthenticated PHP Object Injection
Critical
CVE-2024-43328
EmbedPress <= 4.0.9 - Unauthenticated Local File Inclusion
High
CVE-2024-43281
Void Elementor Post Grid Addon for Elementor Page builder <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43287
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.82 - Cross-Site Request Forgery
High
CVE-2024-7146
JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion
High
CVE-2024-7145
JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion
Medium
CVE-2024-7411
Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure
High
CVE-2024-7628
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover
Medium
CVE-2024-7786
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.1 - Unauthenticated Email Template Disclosure
Medium
CVE-2024-6846
Chatbot with ChatGPT <= 2.4.4 - Missing Authorization
Medium
CVE-2024-6889
Secure Copy Content Protection and Content Locking <= 4.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-7094
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution
High
CVE-2024-43271
Woo Products Widgets For Elementor <= 2.0.4 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-43252
Crew HRM <= 1.1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-43272
Icegram <= 3.1.24 - Missing Authorization
Medium
CVE-2024-43238
weMail <= 1.14.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-43273
Icegram Collect – Easy Form, Lead Collection and Subscription plugin <= 1.3.14 - Missing Authorization
Critical
CVE-2024-43245
JobSearch <= 2.3.4 - Authentication Bypass to Account Takeover
Medium
CVE-2024-43266
WP Job Portal <= 2.1.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-7354
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.10 - Reflected Cross-Site Scripting
Critical
CVE-2024-43240
Indeed Membership Pro <= 12.7 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.