Medium
CVE-2024-6757
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-9546
WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure
High
CVE-2024-9548
Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2024-49257
Azz Anonim Posting <= 0.9 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-49262
Country Flags for Elementor <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-49217
Adding drop down roles in registration <= 1.1 - Unauthenticated Privilege Escalation
Medium
CVE-2024-49268
Disconnected <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-49273
ProfileGrid <= 5.9.3 - Cross-Site Request Forgery
Medium
CVE-2024-49240
AB Categories Search Widget <= 0.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-49274
VOD Infomaniak <= 1.5.7 - Cross-Site Request Forgery
Medium
CVE-2024-49244
CSV Product Import Export for WooCommerce <= 1.0.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-9820
WP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass
Medium
CVE-2024-49255
Da Reactions <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49224
Mitm Bug Tracker <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-49239
Add Categories Post Footer <= 2.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-48046
Contact Form by Supsystic <= 1.7.28 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-49258
WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2024-49271
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.121 - Authenticated (Editor+) Remote Code Execution
Medium
CVE-2024-49264
Events Addon for Elementor <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-48049
Mighty Builder <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-49242
Digital Lottery <= 3.0.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-49256
Htaccess File Editor <= 1.0.18 - Missing Authorization
Medium
CVE-2024-49235
Contact Forms, Live Support, CRM, Video Messages <= 1.10.3 - Unauthenticated Information Disclosure
Medium
CVE-2024-49252
Leyka <= 3.31.6 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.