Medium
CVE-2024-8701
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-9346
Embed videos and respect privacy <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-8913
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template
Medium
CVE-2024-9611
Increase upload file size & Maximum Execution Time limit <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9205
Maximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-9457
WP Builder <= 3.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-9581
Shortcodes AnyWhere <= 1.0.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-8729
Easy Social Share Buttons <= 1.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-8987
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode
Medium
CVE-2024-9067
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion
Medium
CVE-2024-9057
Curator.io: Show all your social media posts in a beautiful feed. <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via feed_id Attribute
Medium
CVE-2024-9064
Elementor Inline SVG <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9065
WP Helper Premium <= 4.6.1 - Missing Authorization in whp_smtp_send_mail_test
Medium
CVE-2024-9066
Marketing and SEO Booster <= 1.9.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9072
GDPR-Extensions-com – Consent Manager <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9074
Advanced Blocks Pro <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9520
UserPlus <= 2.0 - Missing Authorization via Multiple Functions
Medium
CVE-2024-48023
Restaurant Reservations Widget <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-8477
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery
Medium
CVE-2024-8444
Download Manager <= 3.2.99 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-48029
SB Random Posts Widget <= 1.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-48038
wp-Monalisa <= 6.4 - Cross-Site Request Forgery
High
CVE-2024-9022
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter
Critical
CVE-2024-48030
Telecash Ricaricaweb <= 2.2 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.