Medium
CVE-2024-8679
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-11645
Float Block <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-12115
Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication
Critical
CVE-2024-54262
Import Export For WooCommerce <= 1.6.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-54246
FAQs <= 1.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-11644
WP-SVG <= 0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-12257
CardGate Payments for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting
High
CVE-2024-54261
TAX SERVICE Electronic HDM <= 1.1.2 - Unauthenticated SQL Injection
Medium
CVE-2024-11904
코드엠샵 소셜톡 <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54242
Simple Notification <= 1.3 - Missing Authorization
Medium
CVE-2024-54244
Easy Replace <= 1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-11842
DN Shipping by Weight for WooCommerce <= 1.1.1 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2024-54245
Clients <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-11943
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.2.2 - Reflected Cross-Site Scripting via add_query_arg Function
Medium
CVE-2024-54243
Echoza <= 0.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2024-54239
Eyewear prescription form <= 4.0.18 - Missing Authorization to Unauthenticated Arbitrary Options Update
Medium
CVE-2024-11921
GiveWP – Donation Plugin and Fundraising Platform <= 3.18.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11436
Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! <= 1.4.19 - Reflected Cross-Site Scripting
Medium
CVE-2024-54264
Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting
High
CVE-2024-11460
Verowa Connect <= 3.0.1 - Unauthenticated SQL Injection
Medium
CVE-2024-10909
Pojo Forms <= 1.4.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via form_preview_shortcode
Medium
CVE-2024-11352
TwentyTwenty <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12027
Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Filter Updates/Deletions
Medium
CVE-2024-10879
ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.