Medium
CVE-2024-13336
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-13339
DeBounce Email Validator <= 5.8.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13591
Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-13592
Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-13390
ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12522
Yay! Forms | Embed Custom Forms, Surveys, and Quizzes Easily <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13405
Apptivo Business Site CRM <= 5.3 - Cross-Site Request Forgery to IP Address Block
High
CVE-2024-13468
Trash Duplicate and 301 Redirect <= 1.9 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-13589
YouTube Playlists with Schema <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13854
Education Addon for Elementor <= 1.3.1 - Authenticated (Contributor+) Insecure Direct Object Reference via naedu_elementor_template Shortcode
Medium
CVE-2024-13711
Pollin <= 1.01.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-13660
Responsive Flickr Slideshow <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13663
Coaching Staffs <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13719
PeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure
Medium
CVE-2024-11335
UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12069
Lexicata <= 1.0.16 - Reflected Cross-Site Scripting
Medium
CVE-2024-11753
UMich OIDC Login <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13657
Store Locator Widget <= 2025r1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-0865
WP Media Category Management 2.0 - 2.3.3 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-12339
Digihood HTML Sitemap <= 3.1.1 - Reflected Cross-Site Scripting via 'channel'
Medium
CVE-2024-13679
Widget BUY.BOX <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13676
Categorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-11778
CanadaHelps Embedded Donation <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13674
Cosmic Blocks (40+) Content Editor Blocks Collection <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.