Medium
CVE-2024-12710
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-12034
Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock
Medium
CVE-2024-12268
Responsive Blocks – WordPress Gutenberg Blocks <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12266
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.7 - Missing Authorization
Medium
CVE-2024-11230
Elementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget
Medium
CVE-2025-24590
picu – Online Photo Proofing Gallery <= 2.4.0 - Missing Authorization
Medium
CVE-2025-24598
WP Mailster <= 1.8.17.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24606
Client Invoicing by Sprout Invoices – Easy Estimates and Invoices <= 20.8.1 - Missing Authorization
Medium
CVE-2024-11852
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization
Medium
CVE-2025-24592
SysBasics Customize My Account for WooCommerce <= 2.8.22 - Reflected Cross-Site Scripting
Medium
CVE-2024-12875
Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2024-10453
Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings
Medium
CVE-2024-12558
WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db
Medium
CVE-2024-11688
LaTeX2HTML <= 2.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-11722
Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection
Medium
CVE-2024-12588
Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget
Medium
CVE-2024-9545
Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes
Medium
CVE-2024-10797
Full Screen Menu for Elementor <= 1.0.7 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11808
Pingmeter Uptime Monitoring <= 1.0.3 - Reflected Cross-Site Scripting
High
CVE-2024-12721
Custom Product Tabs For WooCommerce <= 1.2.4 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2024-12697
real.Kit <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11938
One Click Upsell Funnel for WooCommerce <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via wps_wocuf_pro_yes Shortcode
Medium
CVE-2024-11287
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting
Medium
CVE-2024-12262
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.