Medium
CVE-2024-9372
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-8670
Photo Gallery by 10Web <= 1.8.28 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-9242
Memberful – Membership Plugin <= 1.73.7 - Authenticated (contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9435
ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting
Medium
CVE-2024-9236
Team – Team Members Showcase Plugin <= 4.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9237
Fish and Ships <= 1.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-8804
Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9233
Logo Slider <= 3.7.0 - Cross-Site Request Forgery
Medium
CVE-2024-8519
Ultimate Member <= 2.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9204
Smart Custom 404 Error Page <= 11.4.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-8499
Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice
Medium
CVE-2024-8520
Ultimate Member <= 2.8.6 - Cross-Site Request Forgery to Membership Status Change
Medium
CVE-2024-9349
Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9353
Popularis Extra <= 1.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-9306
WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-8352
Social Web Suite – Social Media Auto Post, Social Media Auto Publish <= 4.1.11 - Directory Traversal to Arbitrary File Download
Medium
CVE-2024-9182
Maspik – Spam blacklist <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-8282
Ibtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
Medium
CVE-2024-8505
WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter
Medium
CVE-2024-9172
Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-8967
PWA — easy way to Progressive Web App <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9218
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site Scripting
Medium
CVE-2024-8800
RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more <= 2.21.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9210
MC4WP: Mailchimp Top Bar <= 1.6.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.