High
CVE-2024-3954
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-34435
Aiomatic <= 1.9.3 - Missing Authorization
Medium
CVE-2024-34414
raindrops <= 1.600 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2785
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate
Medium
CVE-2024-0445
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-4186
Edwiser Bridge <= 3.0.5 - Authentication Bypass due to Missing Empty Value Check
Medium
CVE-2024-4041
Yoast SEO <= 22.5 - Reflected Cross-Site Scripting
High
CVE-2024-3240
ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-34373
The Plus Addons for Elementor Page Builder Lite <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-34384
Sina Extension for Elementor <= 3.5.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-34383
SEOPress <= 7.6.1 - Information Exposure
Medium
CVE-2024-4335
Rank Math SEO with AI Best SEO Tools <= 1.0.217 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3915
Swift Framework <= 2.7.31 - Missing Authorization to Unauthenticated Arbitrary Content Update
Medium
CVE-2024-34366
Download Alt Text AI <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3916
Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2024-4150
Simple Basic Contact Form <= 20221201 - Reflected Cross-Site Scripting
Critical
CVE-2024-3070
Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-2220
Button contact VR <= 4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-4033
All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image
Medium
CVE-2024-3649
Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulation
Medium
CVE-2024-4290
Sailthru Triggermail <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4289
Sailthru Triggermail <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-2189
Social Icons Widget & Block <= 4.2.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-4185
Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.