Medium
CVE-2024-56242
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-56238
Floating Action Buttons <= 0.9.1 - Missing Authorization
Medium
CVE-2025-24617
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 9.11.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24621
Arconix Shortcodes <= 2.1.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-56266
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.8 - Missing Authorization
Medium
CVE-2024-56251
Event Espresso 4 Decaf <= 5.0.28.decaf - Cross-Site Request Forgery
Medium
CVE-2024-56245
Premium Blocks – Gutenberg Blocks for WordPress <= 2.1.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56243
WPSSO Core <= 18.18.1 - Missing Authorization
Medium
CVE-2024-56247
WP Post Author <= 3.8.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-56249
WPMasterToolKit <= 1.13.1 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-56255
AyeCode Connect <= 1.3.8 - Missing Authorization
Medium
CVE-2024-56241
WPKoi Templates for Elementor <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56254
Move Addons for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56244
Ashe Extra <= 1.2.92 - Missing Authorization
Medium
CVE-2024-56250
Just Writing Statistics <= 4.7 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-56267
Interactive UK Map <= 3.4.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-56302
ConvertCalculator for WordPress <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56240
Pronamic Google Maps <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24624
HT Event <= 1.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-56268
Post Grid Elementor Addon <= 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56236
Hestia Nginx Cache <= 2.4.0 - Missing Authorization
Medium
CVE-2024-56239
Themify Audio Dock <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-24620
Best WordPress Shortcode Plugin in 2025 – AIO Shortcodes <= 1.3.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-24626
Music Store – WordPress eCommerce <= 1.1.19 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.