Medium
CVE-2024-10872
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2024-52474
Express Payments Module <= 1.1.8 - Unauthenticated SQL Injection via type_id
Medium
CVE-2024-52478
Jobify - Job Board WordPress Theme < 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10708
System Dashboard <= 2.8.14 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2024-52483
LeanPress <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-10520
WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion
Medium
CVE-2024-10891
Save as PDF Plugin by Pdfcrowd <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11277
404 Solution <= 2.35.19 - Reflected Cross-Site Scripting
High
CVE-2024-11107
System Dashboard <= 2.8.14 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-52482
Ortto <= 1.0.19 - Reflected Cross-Site Scripting
High
CVE-2024-10913
Clone <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace'
Medium
CVE-2024-51900
What Would Seth Godin Do <= 2.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-9653
Restaurant Menu – Food Ordering System – Table Reservation <= 2.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-11224
Parallax Image <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via position Parameter
Medium
CVE-2024-9777
Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameter
Medium
CVE-2024-9830
Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameter
High
CVE-2024-11038
WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form
High
CVE-2024-11036
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings
Medium
CVE-2024-11195
Email Subscription Popup <= 1.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcode
Medium
CVE-2024-10268
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
Medium
CVE-2024-11098
SVG Block <= 1.1.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10486
Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File
Medium
CVE-2024-52459
Chameleoni Jobs <= 2.5.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-52465
LGPD Framework <= 2.0.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.