Medium
CVE-2024-43956
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-43963
YellowPencil Visual CSS Style Editor <= 7.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-43947
WP Armour Extended <= 1.26 - Cross-Site Request Forgery
Medium
CVE-2024-8200
Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Cross-Site Request Forgery
Medium
CVE-2024-43952
Esotera <= 1.2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43933
WPMobile.App <= 11.48 - Reflected Cross-Site Scripting
Medium
CVE-2024-43921
Magic Post Thumbnail <= 5.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-43925
Envira Photo Gallery <= 1.8.14 - Missing Authorization
Critical
CVE-2024-43941
Propovoice Pro <= 1.7.0.3 - Unauthenticated SQL Injection
Medium
CVE-2024-43935
Delicious Recipes – WordPress Recipe Plugin <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43936
EmbedPress <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43950
Brickscore <= 1.4.2.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-43960
Web and WooCommerce Addons for WPBakery Builder <= 1.4.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43964
DSGVO All in one for WP <= 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43922
NitroPack <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-43948
WP Armour Extended <= 1.26 - Reflected Cross-Site Scripting
Critical
CVE-2024-43955
Droip < 2.5.2 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-43937
WP Crowdfunding <= 2.1.10 - Missing Authorization to Authenticated (Subscriber+) to Enable/Disable Addons
Critical
CVE-2024-43966
WP Testimonial Widget <= 3.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-43959
Testimonials <= 3.0.8 - Reflected Cross-Site Scripting
High
CVE-2024-7351
Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2024-6631
ImageRecycle pdf & image compression <= 3.1.14 - Missing Authorization in Several AJAX Actions
Medium
CVE-2024-2254
RT Easy Builder – Advanced addons for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-site Scripting
Medium
CVE-2023-6987
String Locator <= 2.6.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.