Medium
CVE-2024-49296
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2024-9893
Nextend Social Login Pro <= 3.1.14 - Authentication Bypass via WordPress.com OAuth provider
Medium
CVE-2024-7877
Appointment Booking Calendar <= - Authenticated (Admin+) Stored Cross-Site Scripting via Notification Settings
Medium
CVE-2024-49279
Hyperlink Group Block <= 1.17.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-9061
WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add
Medium
CVE-2024-49290
Cooked Pro < 1.8.0 - Cross-Site Request Forgery
High
CVE-2024-8918
File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload
Medium
CVE-2024-49301
G Meta Keywords <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9895
Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode
High
CVE-2024-9837
AADMY – Add Auto Date Month Year Into Posts <= 2.0.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-9944
WooCommerce <= 9.0.2 - Unauthenticated HTML Injection
Medium
CVE-2024-6757
Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
Medium
CVE-2024-9546
WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure
High
CVE-2024-9548
Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2024-49257
Azz Anonim Posting <= 0.9 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-49262
Country Flags for Elementor <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-49217
Adding drop down roles in registration <= 1.1 - Unauthenticated Privilege Escalation
Medium
CVE-2024-49268
Disconnected <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-49273
ProfileGrid <= 5.9.3 - Cross-Site Request Forgery
Medium
CVE-2024-49240
AB Categories Search Widget <= 0.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-49274
VOD Infomaniak <= 1.5.7 - Cross-Site Request Forgery
Medium
CVE-2024-49244
CSV Product Import Export for WooCommerce <= 1.0.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-9820
WP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass
Medium
CVE-2024-49255
Da Reactions <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.