Medium
CVE-2024-47347
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-8788
EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-47342
Accordion <= 2.2.99 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8712
GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting
Medium
CVE-2024-47341
WP-DownloadManager <= 1.68.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-8189
WP MultiTasking - WP Utilities <= 0.1.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-47339
WP Mail Catcher <= 2.1.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-47346
Newsletters <= 4.9.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-8991
OSM <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes
Medium
CVE-2024-8681
Premium Addons for Elementor <= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget
High
CVE-2024-9130
GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter
Medium
CVE-2024-9177
Themedy Toolbox <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Medium
CVE-2024-10632
Nokaut Offers Box <= 1.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-47334
Zoho Flow for WordPress <= 2.8.0 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-8922
Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php
Medium
CVE-2024-47336
Terms descriptions <= 3.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5429
Logo Slider <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7149
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-47335
Bit Form – Contact Form Plugin <= 2.13.11 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-47338
WPExperts Square For GiveWP <= 1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-47337
Joy Of Text Lite <= 2.3.1 - Missing Authorization
Medium
CVE-2024-10634
Nokaut Offers Box <= 1.4.0 - Cross-Site Request Forgery to Plugin Setting Reset
High
CVE-2024-47331
Multi Step for Contact Form <= 2.7.7 - Unauthenticated SQL Injection
Medium
CVE-2024-47332
Sky Addons for Elementor <= 2.5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.