Medium
CVE-2024-2101
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2024-2111
Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2102
Salon booking system <= 9.6.2 - Unauthenticated Stored Cross-Site Scripting via 'sms_prefix'
Medium
CVE-2024-29929
WCFM – Frontend Manager for WooCommerce <= 6.7.8 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2024-29776
EventPrime <= 3.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29806
ReDi Restaurant Reservation <= 24.0128 - Reflected Cross-Site Scripting
High
CVE-2024-2341
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-2342
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-29134
Tourfic <= 2.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-29135
Tourfic <= 2.11.15 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-29136
Tourfic <= 2.11.17 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-29137
Tourfic <= 2.11.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-27993
Calendarista Basic Edition <= 3.0.2 - Unauthenticated Cross-Site Scripting
Medium
CVE-2024-1125
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
CVE-2024-1320
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1321
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass
Medium
CVE-2024-1123
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post Overwrite
Medium
CVE-2024-1124
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Medium
CVE-2024-1760
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset
Medium
CVE-2024-1484
Booking for Appointments and Events Calendar – Amelia <= 1.0.98 - Reflected Cross-Site Scripting
Medium
CVE-2024-0856
Appointment Booking Calendar <= 1.3.82 - Cross-Site Request Forgery
Medium
CVE-2024-0614
Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-1126
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval
Medium
CVE-2024-1127
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.