Medium
CVE-2024-54312
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2024-10124
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
High
CVE-2024-54292
Appsplate <= 2.1.3 - Unauthenticated SQL Injection
Medium
CVE-2024-54301
FormFacade <= 1.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-54272
Radius Blocks – WordPress Gutenberg Blocks <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54349
Plain Post <= 1.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-54330
Hurrakify <= 2.4 - Unauthenticated Server-Side Request Forgery
High
CVE-2024-12172
WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Update
Medium
CVE-2024-54316
Restaurant & Cafe Addon for Elementor <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54310
Gou Manage My Account Menu <= 1.0.1.8 - Missing Authorization
Low
CVE-2024-54382
Bold Page Builder <= 5.1.5 - Authenticated (Editor+) Path Traversal
Medium
CVE-2024-11765
WordPress Portfolio Plugin – A Plugin for Making Filterable Portfolio Grid, Portfolio Slider and more <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12072
Analytics Cat – Google Analytics Made Easy <= 1.1.2 - Reflected Cross-Site Scripting
High
CVE-2024-54282
WP Mega Menu <= 1.4.2 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2024-54323
New User Approve <= 2.6.2 - Missing Authorization
Medium
CVE-2024-54348
Brand <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54356
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery
Medium
CVE-2024-54381
Advance Menu Manager <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Medium
CVE-2024-54287
Advanced Blog Post Block <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54289
Awesome Support <= 6.3.1 - Missing Authorization
Medium
CVE-2024-54328
Invoice Payment for WooCommerce <= 1.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-54319
Kundgenerator <= 1.0.6 - Reflected Cross-Site Scripting
High
CVE-2024-54376
EazyDocs <= 2.8.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-54355
WP Mailster <= 1.8.17.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.