Medium
CVE-2024-11880
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-12096
Exhibit to WP Gallery <= 0.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-6978
WP Job Manager – Company Profiles <= 1.7 - Reflected Cross-Site Scripting
High
CVE-2024-11643
Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update
High
CVE-2024-11952
Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusion
Medium
CVE-2024-11769
Flower Delivery by Florist One <= 3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5020
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Critical
CVE-2024-43222
Sweet Date <= 3.7.3 - Unauthenticated Privilege Escalation
High
CVE-2024-11293
Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Social Sites Login <= 1.7.9 - Authentication Bypass via WordPress.com OAuth provider
Medium
CVE-2024-10664
Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update
Medium
CVE-2024-10787
LA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11466
Intro Tour Tutorial DeepPresentation <= 6.5.2 - Reflected Cross-Site Scripting
High
CVE-2024-10567
TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access
Medium
CVE-2024-11326
Campaign Monitor Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-11325
AWeber Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-11782
WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12062
Charity Addon for Elementor <= 1.3.3 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11844
IdeaPush <= 8.71 - Missing Authorization to Board Term Deletion
Medium
CVE-2024-11732
BP Profile Shortcodes Extra <= 2.6.0 - Authenticated (Contributor+) SQL Injection via tab Parameter
Medium
CVE-2024-11853
jAlbum Bridge <= 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter
Medium
CVE-2024-11805
Quick License Manager – WooCommerce Plugin <= 2.4.17 - Reflected Cross-Site Scripting
Medium
CVE-2024-10484
Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget
High
CVE-2024-51815
s2Member (Pro) <= 241114 - Unauthenticated Remote Code Execution
Medium
CVE-2024-53817
Product Labels For Woocommerce <= 1.5.8 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.