Medium
CVE-2024-2797
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-33922
Media Cleaner: Clean your WordPress! <= 6.7.2 - Unauthenticated Information Exposure
Medium
CVE-2024-2109
Booster Extension <= 1.2.0 - Basic Information Exposure via booster_extension_authorbox_shortcode_display
Medium
CVE-2024-1386
MailerLite – Signup forms (official) 1.5.0 - 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1809
Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Missing Authorization
Medium
CVE-2024-33935
PB MailCrypt <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4203
Premium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1895
Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta
High
CVE-2024-1897
Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode
Medium
CVE-2024-3554
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-33912
Academy LMS <= 1.9.16 - Missing Authorization
High
CVE-2024-1896
Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode
Medium
CVE-2024-33929
Directorist <= 7.8.6 - Missing Authorization
Medium
CVE-2024-3368
All in One SEO <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33677
Contact Form 7 Extension For Mailchimp <= 0.5.73 - Cross-Site Request Forgery
Medium
CVE-2024-3870
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-30229
GiveWP – Donation Plugin and Fundraising Platform <= 3.4.2 - Authenticated (GiveWP Manager+) PHP Object Injection
Medium
CVE-2024-33680
MainWP Child Reports <= 2.1.1 - Cross-Site Request Forgery
Critical
CVE-2024-30225
WP Migrate Pro <= 2.6.10 - Unauthenticated PHP Object Injection
Medium
CVE-2024-3107
Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal
High
CVE-2024-1789
WP SMTP 1.2 - 1.2.6 - Authenticated (Admin+) SQL Injection
High
CVE-2024-33641
Custom field finder <= 0.3 - Authenticated (Author+) PHP Object Injection
High
CVE-2024-3500
ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets
Critical
CVE-2024-33553
XStore Core <= 5.3.8 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.