Medium
CVE-2024-12003
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-11201
myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode
High
CVE-2024-10578
Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation
High
CVE-2024-11585
WP Hide & Security Enhancer <= 2.5.1 - Missing Authorization to Unauthenticated Arbitrary File Contents Deletion
Medium
CVE-2024-11379
Broadcast <= 51.01 - Reflected Cross-Site Scripting
Medium
CVE-2024-10836
Flixita <= 1.0.82 - Reflected Cross-Site Scripting via id Parameter
High
CVE-2024-10247
YouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-9769
Video Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10681
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-54259
DELUCKS SEO <= 2.5.8 - Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2024-54233
Advanced Control Manager for WordPress by ItalyStrap <= 2.16.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-54260
News Kit Elementor Addons <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54251
Prodigy Commerce <= 3.1.2 - Missing Authorization
Medium
CVE-2024-10689
XLTab – Accordions and Tabs for Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-54238
Board Document Manager from CHUHPL <= 1.9.1 - Reflected Cross-Site Scripting
High
CVE-2024-11178
Login With OTP <= 1.4.2 - Authentication Bypass via Weak OTP
Medium
CVE-2024-10692
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.8.1 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-54232
RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-54256
Easy Blocks pro <= 1.0.21 - Missing Authorization
High
CVE-2024-54248
eewee admin custom <= 1.8.2.4 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-11687
Next-Cart Store to WooCommerce Migration <= 3.9.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-54241
Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce <= 1.5 - Missing Authorization
Medium
CVE-2024-54224
ElementsReady Addons for Elementor <= 6.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54255
Login Widget With Shortcode <= 6.1.2 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.