Medium
CVE-2024-6544
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-8747
Email Obfuscate Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8730
Exit Notifier <= 1.10.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-8732
Roles & Capabilities <= 1.1.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-8242
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload
Medium
CVE-2024-8737
PDF Thumbnail Generator <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-7888
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization
Medium
CVE-2024-8663
WP Simple Booking Calendar <= 2.0.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-8664
WP Test Email <= 1.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-8665
YITH Custom Login <= 1.7.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-8742
Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget
Medium
CVE-2024-5567
Betheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
Medium
CVE-2024-8656
WPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting
High
CVE-2022-2446
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2024-8734
Lucas String Replace <= 2.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-45460
Flipping Cards <= 1.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-45455
WP Meta SEO <= 4.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-7423
Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2024-45456
WP Meta SEO <= 4.5.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-45459
Product Slider for WooCommerce <= 1.13.50 - Reflected Cross-Site Scripting
Medium
CVE-2024-5628
Avada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode
Medium
CVE-2024-8731
Cron Jobs <= 1.2.9 - Reflected Cross-Site Scripting
High
CVE-2024-8269
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
Medium
CVE-2024-45457
Spiffy Calendar <= 4.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.