Medium
CVE-2024-54326
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-54342
Staggs Product Configurator for WooCommerce <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-12255
Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure
Medium
CVE-2024-54366
Vimeography <= 2.4.4 - Sensitive Information Exposure
Medium
CVE-2024-54347
FloristPress <= 7.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-54300
AutoWP <= 2.0.8 - Cross-Site Request Forgery
Critical
CVE-2024-54294
Firebase OTP Authentication <= 1.0.1 - Missing Authorization to Privilege Escalation
Medium
CVE-2024-54269
Notibar <= 2.1.4 - Missing Authorization via ajax_install_plugin
Critical
CVE-2024-54367
ForumWP <= 2.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-54278
News Ticker for Elementor <= 2.1.3 - Missing Authorization
Medium
CVE-2024-54312
Persian Woocommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-10124
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
High
CVE-2024-54292
Appsplate <= 2.1.3 - Unauthenticated SQL Injection
Medium
CVE-2024-54301
FormFacade <= 1.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-54272
Radius Blocks – WordPress Gutenberg Blocks <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54349
Plain Post <= 1.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-54330
Hurrakify <= 2.4 - Unauthenticated Server-Side Request Forgery
High
CVE-2024-12172
WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Update
Medium
CVE-2024-54316
Restaurant & Cafe Addon for Elementor <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54310
Gou Manage My Account Menu <= 1.0.1.8 - Missing Authorization
Low
CVE-2024-54382
Bold Page Builder <= 5.1.5 - Authenticated (Editor+) Path Traversal
Medium
CVE-2024-11765
WordPress Portfolio Plugin – A Plugin for Making Filterable Portfolio Grid, Portfolio Slider and more <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12072
Analytics Cat – Google Analytics Made Easy <= 1.1.2 - Reflected Cross-Site Scripting
High
CVE-2024-54282
WP Mega Menu <= 1.4.2 - Authenticated (Administrator+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.