Medium
CVE-2024-2017
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-35673
Pure Chat – Live Chat Plugin & More! <= 2.22 - Cross-Site Request Forgery
High
CVE-2023-6966
The Moneytizer <= 9.6.3 - Missing Authorization via multiple AJAX actions
High
CVE-2023-6968
The Moneytizer <= 9.6.3 - Cross-Site Request Forgery via multiple AJAX actions
Medium
CVE-2024-5483
LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API
Medium
CVE-2024-5149
BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness
Critical
CVE-2024-4295
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash
Medium
CVE-2024-5317
Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1
Medium
CVE-2024-1718
Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update
Medium
CVE-2024-2382
Authorize.net Payment Gateway For WooCommerce <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass
Medium
CVE-2024-1717
Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
Medium
CVE-2024-4997
WPUpper Share Buttons <= 3.43 - Missing Authorization
Critical
CVE-2024-4552
Social Login Lite For WooCommerce <= 1.6.0 - Authentication Bypass
Medium
CVE-2024-35664
WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting
Medium
CVE-2024-4900
SEOPress <= 7.7.2 - Authenticated (Contributor+) Open Redirect
Medium
CVE-2024-35650
MelaPress Login Security <= 1.3.0 - Authenticated (Admin+) Remote File Inclusion
Medium
CVE-2024-35668
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.77 - Reflected Cross-Site Scripting
Medium
CVE-2024-4899
SEOPress <= 7.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-4958
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalation
High
CVE-2024-5348
Elements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes
High
CVE-2024-3564
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2024-4376
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Medium
CVE-2024-4379
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip
High
CVE-2024-5345
Responsive Owl Carousel for Elementor <= 1.2.0 - Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.