Critical
CVE-2024-31290
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-2950
BoldGrid Easy SEO – Simple and Effective SEO <= 1.6.14 - Information Exposure
Medium
CVE-2024-31352
Email Subscribers & Newsletters <= 5.7.13 - Missing Authorization
High
CVE-2024-31308
WP Import Export Lite <= 3.9.26 - Authenticated (Administrator+) PHP Object Injection
Critical
CVE-2024-31277
Product Designer <= 1.0.32 - Unauthenticated PHP Object Injection
Low
CVE-2024-31342
WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download
Medium
CVE-2024-31265
Sumo <= 1.34 - Cross-Site Request Forgery
Medium
CVE-2024-31349
MailMunch – Grow your Email List <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31278
Premium Addons for Elementor <= 4.10.22 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-31275
EventPrime <= 3.3.4 - Missing Authorization to Booking Price Maniputlation
Medium
CVE-2024-31304
WC Marketplace <= 4.1.3 - Missing Authorization
High
CVE-2024-31300
Easy Social Share Buttons <= 9.4 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2024-3076
MM-email2image <= 0.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-31273
JS Help Desk – Best Help Desk & Support Plugin <= 2.8.3 - Missing Authorization
Medium
CVE-2024-3059
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery to Campaign Deletion
Medium
CVE-2024-3075
MM-email2image <= 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-31242
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Medium
CVE-2024-3188
Shortcodes Ultimate <= 7.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1428
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trailer Box Widget
Medium
CVE-2024-31245
ConvertKit <= 2.4.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-2603
Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting via Email Settings
Medium
CVE-2024-31287
Media Library Folders <= 8.1.8 - Authenticated (Author+) Directory Traversal
High
CVE-2024-31288
RapidLoad Power-Up for Autoptimize <= 2.2.11 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-31283
Advanced Local Pickup for WooCommerce <= 1.6.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.