Medium
CVE-2024-43231
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-43225
Enter Addons <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6639
MDx <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via mdx_list_item Shortcode
High
CVE-2024-37099
GiveWP <= 3.14.1 - Unauthenticated PHP Object Injection
High
CVE-2024-8703
Z-Downloads <= 1.11.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-43229
WP Search Analytics <= 1.4.9 - Missing Authorization
Medium
CVE-2024-43226
WP Dashboard Notes <= 1.0.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-6691
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Currency Settings
Critical
CVE-2024-43207
Unite Gallery Lite <= 1.7.62 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-6562
affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure
Medium
CVE-2024-7413
Obfuscate Email <= 3.8.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7382
Linkify Text <= 1.9.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7412
No Update Nag <= 1.4.12 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7416
Reveal Template <= 3.7 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7410
My Custom CSS PHP & ADS <= 3.3 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7132
Page Builder Gutenberg Blocks – CoBlocks <= 3.1.12 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-4359
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read
Medium
CVE-2024-4360
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag
Medium
CVE-2024-7414
PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure
High
CVE-2024-7150
Slider by 10Web – Responsive Image Slider <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id Parameter
Medium
CVE-2024-5226
Fuse Social Floating Sidebar <= 5.4.10 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
High
CVE-2024-7548
LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter
Medium
CVE-2024-6254
Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery
Medium
CVE-2024-6552
Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.