Medium
CVE-2024-11435
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-9851
LSX Tour Operator <= 1.4.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-11414
RecipePress Reloaded <= 2.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11416
WIP Incoming Lite <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-11440
Grey Owl Lightbox <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11409
Grid View Gallery <= 1.0 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2024-9442
F4 Improvements <= 1.9.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10696
UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.8 - Insecure Direct Object Reference to Sensitive Information Exposure via UA_Template Shortcode
Medium
CVE-2024-11412
Shine PDF Embeder <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11428
Lazy load videos and sticky control <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10726
Friendly Functions for Welcart <= 1.2.4 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-10682
Bulletin Announcements <= 3.11.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-11388
Dino Game – Embed Google Chrome Dinosaur Game in WordPress <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9111
Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-11424
Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11447
Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <=7.0.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-10675
affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting
High
CVE-2024-52497
Shopready <= 3.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-9371
Branda – White Label & Branding, Custom Login Page Customizer <= 3.4.19 - Reflected Cross-Site Scripting
Medium
CVE-2024-52494
Dynamic "To Top" 3.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-10898
Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-24545
BSK Forms Validation <= 1.7 - Reflected Cross-Site Scripting
High
CVE-2024-52499
Pricing table addon for elementor <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-52489
Add Chat App Button <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.