Medium
CVE-2024-6715
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-6709
Sync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update
High
CVE-2024-7291
JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalation
Medium
CVE-2024-4643
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-3238
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.29 - Cross-Site Request Forgery to Arbitrary File Deletion
Medium
CVE-2024-3827
Spectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDs
Medium
CVE-2024-6567
Ebook Store <= 5.8001 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6704
Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection
Medium
CVE-2024-39649
Essential Addons for Elementor <= 5.9.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-39658
Salon booking system <= 10.7 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-38693
WP User Frontend <= 4.0.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-39665
Filter & Grids <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2024-39651
WooCommerce PDF Vouchers <= 4.9.4 - Unauthenticated Arbitrary File Deletion
High
CVE-2024-39655
LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.77 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-39662
Black Widgets For Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39648
Eventin <= 4.0.5 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-39664
Filter & Grids <= 2.8.33 - Cross-Site Request Forgery
Medium
CVE-2024-39644
Black Widgets For Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39639
WordPress File Upload <= 4.24.7 - Missing Authorization
Medium
CVE-2024-39642
LearnPress <= 4.2.6.8.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-39646
Custom 404 Pro <= 3.11.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-39640
WP Social Feed Gallery <= 4.3.9 - Missing Authorization
Medium
CVE-2024-39661
Kubio AI Page Builder <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39656
Tin Canny Reporting for LearnDash <= 4.3.0.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.