Medium
CVE-2024-47641
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-47358
Popup Maker <= 1.19.2 - Missing Authorization
Medium
CVE-2024-47368
Premium Blocks – Gutenberg Blocks for WordPress <= 2.1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47366
Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-9289
WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege Escalation
Medium
CVE-2024-8430
Spice Starter Sites <= 1.2.5 - Missing Authorization to Unauthenticated Demo Content Import
Medium
CVE-2024-47362
Strong Testimonials <= 3.1.16 - Missing Authorization
Medium
CVE-2024-47631
Logo Carousel – Clients logo carousel for WP <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47364
Move Addons for Elementor <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47387
Search Atlas SEO <= 1.8.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-47360
BA Book Everything <= 1.6.20 - Reflected Cross-Site Scripting
Medium
CVE-2024-47621
Zotpress <= 7.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47392
Element Pack Elementor Addons <= 5.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47367
YITH WooCommerce Product Add-Ons <= 4.13.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-47369
Social Auto Poster <= 5.3.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-47365
Automatically Hierarchic Categories in Menu <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47638
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-8727
DK PDF <= 1.9.6 - Reflected Cross-Site Scripting
High
CVE-2024-7434
UltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-47626
RomethemeKit For Elementor <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-9265
Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation
Medium
CVE-2024-47383
The Pack Elementor addons <= 2.0.8.8 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-8324
XO Slider <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47382
Page-list <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.