Medium
CVE-2024-43309
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-43313
FormFacade <= 1.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-43323
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.28 - Insufficient Input Validation
Medium
CVE-2024-43335
Responsive Blocks – WordPress Gutenberg Blocks <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-43317
RegistrationMagic <= 6.0.1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-3409
Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings
High
CVE-2024-43281
Void Elementor Post Grid Addon for Elementor Page builder <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43287
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.82 - Cross-Site Request Forgery
Medium
CVE-2024-43312
WPC Frequently Bought Together for WooCommerce <= 7.1.9 - Missing Authorization
Medium
CVE-2024-43302
Fonts <= 3.7.7 - Missing Authorization
Medium
CVE-2024-43331
WP SMS <= 6.9.3 - Missing Authorization
Medium
CVE-2024-43285
Presto Player <= 3.0.2 - Missing Authorization
Medium
CVE-2024-43305
Custom Layouts – Post + Product grids made easy <= 1.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43340
AFI – The Easiest Integration Plugin <= 1.89.4 - Cross-Site Request Forgery
High
CVE-2024-7301
WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-7630
Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure
Medium
CVE-2024-7501
Download Plugins and Themes from Dashboard <= 1.8.7 - Cross-Site Request Forgery
Medium
CVE-2024-7144
JetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7146
JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion
Medium
CVE-2024-7136
JetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-7049
Custom Field For WP Job Manager <= 1.2 - Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode
High
CVE-2024-7145
JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion
Medium
CVE-2022-3399
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.17.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6617
NinjaTeam Header Footer Custom Code < 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via CSS Styles
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.