Medium
CVE-2023-7073
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-2793
Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.30 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-4205
Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure
Medium
CVE-2024-3190
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field
Critical
CVE-2024-5150
Login with phone number <= 1.7.26 - Authentication Bypass due to Missing Empty Value Check
Critical
CVE-2024-35629
Easy Digital Downloads – Recent Purchases <= 1.0.2 - Unauthenticated Remote File Inclusion
High
CVE-2024-35634
Woocommerce – Recent Purchases <= 1.0.1 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2024-4045
Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation <= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4858
Testimonial Carousel For Elementor <= 10.2.0 - Missing Authorization to Limited Setting Update
Medium
CVE-2024-4480
WP Prayer II <= 2.4.7 - Cross-Site Request Forgery to Email Settings Update
High
CVE-2024-0867
Email Log <= 2.4.8 - Unauthenticated Hook Injection
Medium
CVE-2024-1134
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1974
HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-4484
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2784
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card
Critical
CVE-2024-4544
Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass
Medium
CVE-2024-3032
Themify Builder <= 7.5.7 - Open Redirect via 'tb_redirect_fail'
Medium
CVE-2024-4485
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-3552
Web Directory Free <= 1.6.9 - Unauthenticated SQL Injection
Medium
CVE-2024-4149
Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3718
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box
Medium
CVE-2024-3626
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization
Medium
CVE-2024-4378
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider
High
CVE-2024-4662
Oxygen Builder <= 4.8.2 - Authenticated (Contributor+) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.