Medium
CVE-2024-13335
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-13542
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13594
Simple Downloads List <= 1.4.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-13572
Precious Metals Charts and Widgets for WordPress <= 1.2.8 - Authenticated (Contributor+) Stored Cross-site Scripting
Medium
CVE-2024-13698
Jobify - Job Board WordPress Theme <= 4.2.7 - Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image Generation
Medium
CVE-2024-13583
Simple Gallery with Filter <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13422
SEO Blogger to WordPress Migration using 301 Redirection <= 0.4.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-12118
The Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13389
Cliptakes <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13340
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13511
Variation Swatches for WooCommerce 1.0.8 - 1.3.2 - Cross-Site Request Forgery to Plugin Settings Reset
Medium
CVE-2024-12477
Avada Builder <= 3.11.11 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets
Medium
CVE-2025-23992
Toocheke Companion <= 1.166 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-13593
BMLT Meeting Map <= 2.6.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-13236
Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-23662
WP Panoramio <= 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12504
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-13234
Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection
Medium
CVE-2024-12043
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-13499
GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function
High
CVE-2024-13495
GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function
High
CVE-2024-13496
GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter
Medium
CVE-2024-13447
WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
Medium
CVE-2024-13590
Ketchup Shortcodes <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.