Medium
CVE-2024-47320
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-8872
Store Hours for WooCommerce <= 4.3.20 - Reflected Cross-Site Scripting
Medium
CVE-2024-47316
Salon booking system <= 10.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-47396
Move Addons for Elementor <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47308
Templately <= 3.1.2 - Missing Authorization
Medium
CVE-2024-47326
Share This Image <= 2.01 - Reflected Cross-Site Scripting
High
CVE-2024-8704
Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
Medium
CVE-2024-47317
Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads <= 2.0.84 - Missing Authorization
Medium
CVE-2024-8552
Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable
Medium
CVE-2024-47321
WP Datepicker <= 2.1.1 - Missing Authorization
Medium
CVE-2024-47307
Meta slider and carousel with lightbox <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-47322
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-47312
Classic Editor and Classic Widgets <= 1.4.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-47302
Fluent Support <= 1.8.0 - Insufficient Authorization on Email Verification
Medium
CVE-2024-47303
Livemesh Addons for Elementor <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8546
ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget
Medium
CVE-2024-8858
Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter
Medium
CVE-2024-9169
litespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-8290
WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Privilege Escalation
Critical
CVE-2024-7385
WordPress Simple HTML Sitemap <= 3.1 - Authenticated (Admin+) SQL Injection
Low
CVE-2024-8350
Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add
Medium
CVE-2024-8549
Simple Calendar – Google Calendar Plugin <= 3.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9027
WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode
Critical
CVE-2024-8485
REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.