Medium
CVE-2024-52491
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-10528
Ultimate Member <= 2.8.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Profile Picture Update
Medium
CVE-2024-10316
Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-52502
ImbaChat <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10054
Happyforms <= 1.26.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10665
Yaad Sarig Payment Gateway For WC <= 2.2.4 - Missing Authorization to Authenticated (Subscriber+) Log Read/Deletion
Medium
CVE-2024-10878
Sugar Calendar (Lite) <= 3.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11278
GD bbPress Attachments <= 4.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-11400
HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter
Medium
CVE-2024-11198
GD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter
Critical
CVE-2024-52476
Fediverse Embeds <= 1.5.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-10365
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Critical
CVE-2024-52475
Wawp < 3.0.18 - Unauthenticated Privilege Escalation
High
CVE-2024-10855
Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion
High
CVE-2024-10899
WooCommerce Product Table Lite <= 3.8.6 - Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting
Medium
CVE-2024-11154
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-52487
Ultimate Classified Listings <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-9239
Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-11179
MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-8726
MailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-52484
Wc Recently viewed products <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-10900
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion
Medium
CVE-2024-52486
Elementor Portfolio Builder <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-52477
Document & Data Automation <= 1.6.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.