Medium
CVE-2024-37515
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-35773
Comment Reply Email <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-37520
ShopBuilder – Elementor WooCommerce Builder Addons <= 2.1.12 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37510
Charitable <= 1.8.1.7 - Missing Authorization via ajax_license_check()
High
CVE-2024-37499
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37934
Ninja Forms <= 3.8.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-37506
Charitable <= 1.8.1.7 - Missing Authorization to Unauthorized Donation
High
CVE-2024-37484
Zephyr Project Manager <= 3.3.97 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update
High
CVE-2024-37501
Advanced Classifieds & Directory Pro <= 3.1.3 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-37486
Paid Memberships Pro <= 3.0.5 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-37952
Book Your Travel <= 8.18.17 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-37498
Table & Contact Form 7 Database – Tablesome <= 1.0.33 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-2385
Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets
Low
CVE-2024-6434
Premium Addons for Elementor <= 4.10.35 - Regular Expressions Denial of Service
Medium
CVE-2024-6340
Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Medium
CVE-2024-4482
The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Medium
CVE-2024-37479
LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion via 'progress_type'
Critical
CVE-2024-6172
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe
High
CVE-2024-5349
LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37456
Noptin <= 3.4.2 - Missing Authorization to Unauthenticated Form Submission
Medium
CVE-2024-37475
Newspack Newsletters <= 2.13.2 - Missing Authorization
High
CVE-2024-37462
Ultimate Bootstrap Elements for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37465
GPT3 AI Content Writer <= 1.8.66 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-37464
Beaver Builder Addons by WPZOOM <= 1.3.5 - Authenticated (Editor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.