Medium
CVE-2024-11088
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-11385
Pure CSS Circle Progress bar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10393
Tutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User Registration
High
CVE-2024-10400
Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter
High
CVE-2024-52498
SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-10623
ForumEngine <= 1.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-11402
Block Editor Bootstrap Blocks <= 6.6.1 - Reflected Cross-Site Scripting via tab
High
CVE-2024-52496
Absolute Addons For Elementor <= 1.0.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-10671
Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-52503
Tailored Tools <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10792
Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-11089
Anonymous Restricted Content <= 1.6.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
High
CVE-2024-52501
Office Locator <= 1.3.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-52493
Meteor Slides <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10782
Theme Builder For Elementor <= 1.2.2 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10796
If-So Dynamic Content Personalization <= 1.9.2.1 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11371
Theater for WordPress <= 0.18.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-52492
Image horizontal reel scroll slideshow <= 13.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10785
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9542
Sky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template
Medium
CVE-2024-52495
Distance Based Shipping Calculator <= 2.0.23 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-52490
Pathomation <= 2.5.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-11438
StreamWeasels Online Status Bar <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11456
Run Contests, Raffles, and Giveaways with ContestsWP <= 2.0.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.