Medium
CVE-2024-11325
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-11782
WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12062
Charity Addon for Elementor <= 1.3.3 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11844
IdeaPush <= 8.71 - Missing Authorization to Board Term Deletion
Medium
CVE-2024-11732
BP Profile Shortcodes Extra <= 2.6.0 - Authenticated (Contributor+) SQL Injection via tab Parameter
Medium
CVE-2024-11853
jAlbum Bridge <= 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter
Medium
CVE-2024-11805
Quick License Manager – WooCommerce Plugin <= 2.4.17 - Reflected Cross-Site Scripting
Medium
CVE-2024-10484
Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget
High
CVE-2024-51815
s2Member (Pro) <= 241114 - Unauthenticated Remote Code Execution
Medium
CVE-2024-53817
Product Labels For Woocommerce <= 1.5.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-53794
Arkhe Blocks <= 2.27.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via block attributes
Medium
CVE-2024-53815
Pinpoint Booking System <= 2.9.9.5.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-11391
Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-11373
Connexion Logs <= 3.0.2 - Cross-Site Request Forgery to Log Deletion
Medium
CVE-2024-53821
Pie Register Premium < 3.8.3.3 - Unauthenticated Cross-Site Scripting
High
CVE-2024-54219
AIO Contact <= 2.8.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-53804
WP Mailster <= 1.8.16.0 - Unauthenticated Information Exposure
Medium
CVE-2024-53823
The Plus Addons for Elementor Page Builder Lite <= 5.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11200
Goodlayers Core <= 2.0.7 - Reflected Cross-Site Scripting via 'font-family'
Critical
CVE-2024-53810
Simple User Registration <= 5.5 - Missing Authorization to User Deletion
Medium
CVE-2024-53820
Captivate Sync <= 2.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-54217
ARForms <= 6.4.1 - Missing Authorization to Plugin Settings Change
High
CVE-2024-53811
WDesignkit <= 1.0.40 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2024-12015
WP Project Manager <= 2.6.31 - Authenticated (Project Manager+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.