Medium
CVE-2024-11855
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-11867
Companion Portfolio – Responsive Portfolio Plugin <= 2.4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12523
States Map US <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12422
Import Eventbrite Events <= 1.7.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12459
Ganohrs Toggle Shortcode <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11712
WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download
High
CVE-2024-11721
Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Privilege Escalation
Medium
CVE-2024-11752
Eveeno <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12474
GeoDataSource Country Region DropDown <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24574
PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-12411
WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More <= 2.5.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-55864
My WP Customize Admin/Frontend <= 1.24.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-11710
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection
High
CVE-2024-11720
Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-11763
Plezi <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11266
Geocache Stat Bar Widget <= 0.911 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10690
Shortcodes for Elementor <= 1.0.4 - Authenticated (Contributor+) Post Disclosure
High
CVE-2024-11711
WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection
Medium
CVE-2024-11714
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()
Medium
CVE-2024-11713
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()
Medium
CVE-2024-11141
Sailthru Triggermail <= 1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-11715
WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation
Medium
CVE-2024-11759
Bukza <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12501
Simple Locator <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.