Medium
CVE-2024-11823
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-12028
Friends <= 3.2.1 - Missing Authorization
Medium
CVE-2024-11204
ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting via url Parameter
Medium
CVE-2024-12110
Gold Addons for Elementor <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) License Activation/Deactivation
Medium
CVE-2024-10320
Cookielay <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cookielay Shortcode
Medium
CVE-2024-11368
Splash Sync <= 2.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-12060
WP Media Optimizer (.webp) <= 1.4.0 - Reflected Cross-Site Scripting via wpmowebp-css-resources and wpmowebp-js-resources Parameters
Medium
CVE-2024-11339
Smart PopUp Blaster <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11444
CLUEVO LMS, E-Learning Platform <= 1.13.2 - Cross-Site Request Forgery to Module Deletion
Medium
CVE-2024-9706
Ultimate Coming Soon & Maintenance <= 1.0.9 - Missing Authorization to Unauthenticated Template Activation
Medium
CVE-2024-9705
Ultimate Coming Soon & Maintenance <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Template Name Update
Critical
CVE-2024-12155
SV100 Companion <= 2.0.02 - Missing Authorization to Unuathenticated Arbitrary Options Update
High
CVE-2024-11323
AI Quiz | Quiz Maker <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2024-11292
WP Private Content Plus <= 3.6.1 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-12003
WP System <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-11201
myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode
High
CVE-2024-10578
Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation
High
CVE-2024-11585
WP Hide & Security Enhancer <= 2.5.1 - Missing Authorization to Unauthenticated Arbitrary File Contents Deletion
Medium
CVE-2024-11379
Broadcast <= 51.01 - Reflected Cross-Site Scripting
Medium
CVE-2024-10836
Flixita <= 1.0.82 - Reflected Cross-Site Scripting via id Parameter
High
CVE-2024-10247
YouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-9769
Video Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10681
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-54259
DELUCKS SEO <= 2.5.8 - Authenticated (Subscriber+) Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.