Medium
CVE-2024-30529
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-2047
ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw
High
CVE-2024-3018
Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword
Medium
CVE-2024-31120
Responsive Image Gallery, Gallery Album <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30550
Responsive Image Gallery, Gallery Album <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30461
Tumult Hype Animations <= 1.9.11 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2024-2411
MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal
Medium
CVE-2024-30514
Paid Memberships Pro – Payfast Gateway Add On <= 1.4.1 - Unauthenticated Information Exposure
High
CVE-2024-1872
Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode
Medium
CVE-2024-30503
Mailster <= 1.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30517
Sliced Invoices <= 3.9.2 - Missing Authorization
Medium
CVE-2024-30455
GamiPress <= 6.8.5 - Cross-Site Request Forgery
Medium
CVE-2024-30452
Landing Page Builder <= 1.5.1.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-30435
The Plus Blocks for Block Editor | Gutenberg <= 3.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-0608
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection
Low
CVE-2024-30492
Import Export WordPress Users <= 2.5.2 - Authenticated (Shop Manager+) Path Traversal
Medium
CVE-2024-2108
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2024-3061
HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2024-1858
Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-30433
WC Marketplace <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30523
Paid Memberships Pro – Mailchimp Add On <= 2.3.4 - Unauthenticated Information Disclosure
Medium
CVE-2024-2113
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export
Medium
CVE-2024-30430
Fluent CRM <= 2.8.44 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-30463
BEAR <= 1.1.4.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.