Medium
CVE-2024-11898
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-53813
WP Travel <= 9.6.0 - Missing Authorization
Medium
CVE-2024-53806
Maspik – Spam blacklist <= 2.2.7 - Cross-Site Request Forgery to Plugin Settings Change
Medium
CVE-2024-11707
My auctions allegro <= 3.6.17 - Reflected Cross-Site Scripting
High
CVE-2024-54215
Revy <= 1.18 - Unauthenticated SQL Injection
Medium
CVE-2024-54210
Advanced Element Bucket Addons for Elementor <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11866
BMLT Tabbed Map <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53801
Bold Page Builder <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11453
WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53802
Futurio Extra <= 2.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_size tag
Medium
CVE-2024-9058
Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget
Medium
CVE-2024-54218
AIO Contact <= 2.8.1 - Missing Authorization
Medium
CVE-2024-53819
Client Invoicing by Sprout Invoices <= 20.8.0 - Insecure Direct Object Reference
Medium
CVE-2024-53816
Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization
Medium
CVE-2024-54208
Block Controller <= 1.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-54205
Paloma Widget <= 1.14 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-53824
All Bootstrap Blocks <= 1.3.19 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-53798
FloristPress <= 7.3.0 - Missing Authorization to Arbitrary Content Deletion
Medium
CVE-2024-53809
Namaste! LMS <= 2.6.4.1 - Cross-Site Request Forgery
Medium
CVE-2024-53812
WP GeoNames <= 1.8 - Reflected Cross-Site Scripting
High
CVE-2024-54216
ARForms <= 6.4.1 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2024-53799
FloristPress <= 7.3.0 - Missing Authorization to Sensitive Data Exposure
Critical
CVE-2024-53822
Pie Register Premium < 3.8.3.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-24566
Intro Tour Tutorial DeepPresentation <= 6.5.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.