Medium
CVE-2024-29090
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-27999
Preview E-mails for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-30181
Locatoraid Store Locator <= 3.9.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29761
WP Post Disclaimer <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29773
BizPrint <= 4.5.4 - Cross-Site Request Forgery to Cross-Site Scripting via process.php
Medium
CVE-2024-29776
EventPrime <= 3.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29793
MailChimp Forms by MailMunch <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1746
Testimonial Slider <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-0866
Check & Log Email <= 1.0.9 - Unauthenticated Hook Injection
Medium
CVE-2024-29815
WP Change Email Sender <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-0588
Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery
Medium
CVE-2024-29759
Calculated Fields Form <= 1.2.54 - Reflected Cross-Site Scripting
Medium
CVE-2024-2845
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer For Elementor & Gutenberg <= 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-28850
WP Crontrol <= 1.16.1 - Remote Code Execution
Medium
CVE-2026-15297
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting
High
CVE-2024-2025
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request
Medium
CVE-2024-0626
WooCommerce Clover Payment Gateway <= 1.3.1 - Missing Authorization via callback_handler
Medium
CVE-2024-2165
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-2033
Video Conferencing with Zoom <= 4.4.5 - Sensitive Information Exposure
Medium
CVE-2024-2536
Rank Math SEO with AI SEO Tools <= 1.0.214 - Authenticated(Contributor+) Stored Cross-Site Scripting via HowTo block attributes
Medium
CVE-2024-1850
AI Post Generator | AutoWriter <= 3.3 - Missing Authorization
High
CVE-2024-1799
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-1984
Graphene <= 2.9.2 - Missing Authorization
Medium
CVE-2024-0881
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel <= 2.2.74 - Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.