Medium
CVE-2024-9836
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-9835
RSS Feed Widget <= 3.0.0 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI']
Medium
CVE-2024-8500
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
High
CVE-2024-9947
ProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider
Medium
CVE-2024-9231
WP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-10189
Anchor Episodes Index (Spotify for Podcasters) <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via anchor_episodes Shortcode
Medium
CVE-2024-8852
All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs
Medium
CVE-2024-9541
News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template
High
CVE-2024-49669
INK Official <= 4.1.2 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-49683
Schema & Structured Data for WP & AMP <= 1.35 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-49660
Campus Explorer Widget <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-49697
Sunshine Photo Cart <= 3.2.9 - Missing Authorization
Medium
CVE-2024-49685
Custom Twitter Feeds (Tweets Widget) <= 2.2.3 - Cross-Site Request Forgery
Medium
CVE-2024-49632
CWD 3D Image Gallery <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-49686
Landing Page Cat <= 1.7.4 - Missing Authorization
Medium
CVE-2024-49641
Tida URL Screenshot <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-49663
uCAT – Next Story <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-49696
Robo Gallery <= 3.2.21 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-49659
Coub <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49634
BP Member Type Manager <= 1.01 - Reflected Cross-Site Scripting
Medium
CVE-2024-49639
Monitor.chat <= 1.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-10003
Rover IDX <= 3.0.0.2903 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
Medium
CVE-2024-49679
WPKoi Templates for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-49690
Qi Blocks <= 1.3.2 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.