Medium
CVE-2024-11291
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-56021
Category Post Shortcode <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56023
WP eCommerce Quickpay <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11926
Traveler <= 3.1.6 - Missing Authorization in Several AJAX Actions
Medium
CVE-2024-56038
SendSMS <= 1.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-12513
Contests by Rewards Fuel <= 2.0.65 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-56043
WPLMS <= 1.9.9 - Unauthenticated Privilege Escalation
High
CVE-2024-56057
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2024-56054
WPLMS < 1.9.9.5.2 - Authenticated (Instructor+) Arbitrary File Upload
Medium
CVE-2024-12449
Video Share VOD – Turnkey Video Site Builder Script <= 2.6.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56044
WPLMS <= 1.9.9 - Missing Authorization to Unauthenticated User Token Generation
Medium
CVE-2024-10562
Form Maker by 10Web <= 1.15.30 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-56049
WPLMS < 1.9.9.5.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
9f5cdb47-205a-4c03-a8a9-f39d1b4fc769
Agency Toolkit <= 1.0.23 - Missing Authorization to Unauthenticated Arbitrary Options Update
Medium
CVE-2024-56026
Simple Proxy <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56025
AdWork Media EZ Content Locker <= 3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56033
FAQs <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-56034
Services updates for customers <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56028
Lemonade Social Networks Autoposter Pinterest <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56020
SvegliaT Buttons <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12259
CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation
Medium
CVE-2024-56018
BU Section Editing <= 0.9.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-56031
Smart Shopify Product <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2024-56019
Inline Footnotes <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.