Medium
CVE-2024-10113
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-9356
Yotpo: Product & Photo Reviews for WooCommerce <= 1.7.9 - Reflected Cross-Site Scripting
High
CVE-2024-10260
Tripetto <= 8.0.11 - Unauthentiated Stored Cross-Site Scripting via Form File Upload
High
CVE-2024-10793
WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter
Medium
CVE-2024-10897
Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation
Medium
CVE-2024-9609
LearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-10893
WP Booking Calendar <= 10.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9765
EKC Tournament Manager <= 2.2.1 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2024-10311
External Database Based Actions <= 0.1 - Authenticated (Subscriber+) Authentication Bypass
Medium
CVE-2024-8978
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-10704
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.30 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-24534
DPortfolio <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24541
DK White Label <= 1.0 - Reflected Cross-Site Scripting
Critical
CVE-2024-10924
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Medium
CVE-2024-10980
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Cookie Consent'
Medium
CVE-2024-51899
Simple Pricing Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9709
EKC Tournament Manager <= 2.2.1 - Cross-Site Request Forgery to Tournament and Team Creation
High
CVE-2024-8979
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
Medium
CVE-2024-9458
Reservit Hotel <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9711
EKC Tournament Manager <= 2.2.1 - Cross-Site Request Forgery to Tournament Deletion
Medium
CVE-2024-52418
Gameplan <= 1.5.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-52423
Themify Builder <= 7.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-10571
Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
Critical
CVE-2024-52409
AJAX Random Posts <= 0.3.3 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.