Medium
CVE-2024-2124
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-1424
GiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1181
Coming Soon, Under Construction & Maintenance Mode By Dazzler <= 2.1.2 - Maintenance Mode Bypass
Medium
CVE-2024-1473
Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure
Medium
CVE-2024-1477
Easy Maintenance Mode <= 1.4.2 - Information Exposure
Medium
CVE-2024-29134
Tourfic <= 2.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-29135
Tourfic <= 2.11.15 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-2580
Automation By Autonami <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-29136
Tourfic <= 2.11.17 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-6777
WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service
Medium
CVE-2024-29137
Tourfic <= 2.11.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-27997
Visual Composer Website Builder <= 45.6.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-27987
GiveWP <= 3.3.1 - Reflected Cross-Site Scripting
High
CVE-2024-1812
Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url
Medium
CVE-2024-2294
Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal
High
CVE-2024-1685
Social Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-1813
Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
Medium
CVE-2024-29104
Ticket Tailor <= 1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-27991
SupportCandy <= 3.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-1857
Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates <= 2.6.6 - Missing Authorization to Unauthenticated Information Exposure
Medium
CVE-2024-2399
Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-27985
PropertyHive <= 2.0.9 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-27971
Premmerce Permalink Manager for WooCommerce <= 2.3.10 - Unauthenticated Local File Inclusion
Medium
CVE-2024-27960
Email Subscription Popup <= 1.2.20 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.