Medium
CVE-2024-8031
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-8106
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-8119
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via page
High
CVE-2024-8104
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2024-8117
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_option
Medium
CVE-2024-8758
Quiz and Survey Master (QSM) <= 9.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-7846
YITH WooCommerce Ajax Search <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8854
Polls CP <= 1.0.76 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8851
Polls CP <= 1.0.76 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5053
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification
Medium
CVE-2024-8108
Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
High
CVE-2024-7717
WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection
Medium
CVE-2024-8276
WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
High
CVE-2024-7435
Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-3886
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
Medium
CVE-2024-45270
Carousel Slider <= 2.2.3 - Cross-Site Request Forgery
Medium
CVE-2024-5212
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
Medium
CVE-2024-45269
Carousel Slider <= 1.10.2 - Cross-Site Request Forgery
Medium
CVE-2022-4536
IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-4539
Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-4100
WP Cerber Security <= 9.4 - IP Protection Bypass
High
CVE-2024-8252
Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-7122
Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2024-3998
Betheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.