Medium
CVE-2024-11275
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-54400
AppMaps <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54435
Onlywire Multi Autosubmitter <= 1.2.4 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-12309
Rate My Post – Star Rating Plugin by FeedbackWP <= 4.2.4 - Unauthenticated Voting On Scheduled Posts
Medium
CVE-2024-54389
addWeather <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54427
Category of Posts <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54417
PixProof <= 2.0.1 - Missing Authorization
Medium
CVE-2024-54419
Ui Slider Filter By Price <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2024-54421
Floating Video Player <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54401
Advanced Fancybox <= 1.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-12595
AHAthat <= 1.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-54411
WP Controller <= 3.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54440
WP-Ban-User <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-12042
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)
Medium
CVE-2024-54386
Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart <= 3.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54359
Banner System <= 1.0.0 - Missing Authorization
Medium
CVE-2024-54404
MDC Comment Toolbar <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54354
Termin-Kalender <= 0.99.47 - Missing Authorization to Authenticated (Subscriber+)
Medium
CVE-2024-54394
Mandrill WP <= 1.0.5 - Cross-Site Request Forgery
Medium
CVE-2019-25221
Responsive Filterable Portfolio <=1.0.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-54433
Simple Booking Widget <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-10783
MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation
Medium
CVE-2024-54432
WP Flipkart Importer <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54424
Like in Vk.com <= 0.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.