Medium
CVE-2024-37476
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-37454
AWSM Team <= 1.3.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-5819
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.45 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes
High
CVE-2024-37410
PowerPack Lite for Beaver Builder <= 1.3.0.3 - Authenticated (Editor+) Local File Inclusion
Medium
CVE-2024-37446
Chained Quiz <= 1.3.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37433
Mailster <= 4.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-37434
Atarim <= 3.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37277
Paid Memberships Pro <= 3.0.4 - Unauthenticated Insecure Direct Object Reference to Order Status Update
High
CVE-2024-37268
Striking <= 2.3.4 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-6164
Filter & Grids <= 2.8.32 - Unauthenticated Local File Inclusion
Medium
CVE-2024-5289
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting in Google Maps Widget
Medium
CVE-2024-4983
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-5630
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2024-3249
Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification
Medium
CVE-2024-3963
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers <= 1.12.13 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-5575
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.42 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-3964
Product Enquiry for WooCommerce <= 3.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5167
CM Email Registration Blacklist and Whitelist <= 1.4.8 - Cross-Site Request Forgery
Medium
CVE-2024-4874
Bricks Builder <= 1.9.8 - Insecure Direct Object Reference
Medium
CVE-2024-5965
Mosaic <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Medium
CVE-2024-4753
WP Secure Maintenance <= 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-37881
SiteGuard WP Plugin <= 1.7.6 - Login Page Disclosure
Medium
CVE-2024-6023
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Email Adding
High
CVE-2024-37234
Academy LMS <= 2.0.10 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.