Medium
CVE-2024-1472
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-1126
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval
Medium
CVE-2024-0708
Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.2 - Unauthenticated Information Exposure
Medium
CVE-2024-1127
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export
Medium
CVE-2024-0326
Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via onClick Events
Medium
CVE-2024-1242
Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1389
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return
Medium
CVE-2024-1282
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1390
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page
High
CVE-2024-25095
Easy Forms for Mailchimp <= 6.8.10 - Sensitive Information Exposure via logfile
Medium
CVE-2024-1294
Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice
Medium
CVE-2024-1322
Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change
Medium
CVE-2024-25914
SMTP Mail Plugin <= 1.3.20 - Cross Site Request Forgery
High
CVE-2024-3591
Geo Controller <= 8.6.4 - Unauthenticated PHP Object Injection via shortcode REST API Route
Medium
CVE-2024-0595
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()
High
CVE-2024-24926
Brooklyn <= 4.9.9.2 - PHP Object Injection
Medium
f6c5e3f8-ebbd-4cc3-b9b1-3f1704e3c07a
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) User Meta Disclosure
Medium
CVE-2024-30468
All In One WP Security <= 5.2.6 - Cross-Site Request Forgery to IP Blocking
Medium
CVE-2024-0616
Passster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-0516
Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta
Medium
CVE-2024-0620
PPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism Bypass
Medium
CVE-2024-1037
All-In-One Security (AIOS) – Security and Firewall <= 5.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-1079
Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval
Medium
CVE-2024-1044
Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.