Medium
CVE-2024-39668
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-39641
LearnPress <= 4.2.6.8.2 - Cross-Site Request Forgery
Critical
CVE-2024-39653
VikRentCar <= 1.4.0 - Unauthenticated SQL Injection
High
CVE-2024-39643
RegistrationMagic <= 6.0.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-39650
WooCommerce PDF Vouchers <= 4.9.4 - Missing Authorization
Medium
CVE-2024-39647
Message Filter for Contact Form 7 <= 1.6.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-39645
Tutor LMS <= 2.7.2 - Cross-Site Request Forgery
Medium
CVE-2024-39654
Sign-up Sheets <= 2.2.12 - Missing Authorization
Critical
CVE-2024-5057
Easy Digital Downloads <= 3.2.12 - Unauthenticated SQL Injection
Medium
CVE-2024-39652
WooCommerce PDF Vouchers <= 4.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-8542
Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-39663
WP Fast Total Search <= 1.68.232 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-39659
WP-PostRatings <= 1.91.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7389
Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure
Medium
CVE-2024-39657
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.18 - Cross-Site Request Forgery
Medium
CVE-2024-39660
Photo Engine <= 6.3.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-6346
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget
Medium
CVE-2024-7302
Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
Medium
CVE-2024-5331
Breakdance <= 1.7.2 - Missing Authorization
Medium
CVE-2024-5330
Breakdance <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2455
Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL
Medium
CVE-2024-2090
Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2024-6698
FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-8493
The Events Calendar <= 6.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.