Medium
CVE-2024-38784
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-38771
Atarim <= 4.0 - Missing Authorization
Medium
CVE-2024-5804
Conditional Fields for Contact Form 7 <= 2.4.13 - Cross-Site Request Forgery to Plugin Setting Reset
Critical
CVE-2024-6636
WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation
Medium
CVE-2024-38774
Security Optimizer – The All-In-One Protection Plugin <= 1.5.0 - Missing Authorization via hide_notice()
Medium
CVE-2024-38769
Arconix Shortcodes <= 2.1.11 - Missing Authorization
High
CVE-2024-38772
JetWidgets for Elementor and WooCommerce <= 1.1.7 - Authenticated (Contributor+) Limited Local File Inclusion
Medium
CVE-2024-38783
Arconix FAQ <= 1.9.4 - Missing Authorization
Medium
CVE-2024-38785
Gutenverse <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-6635
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass
Medium
CVE-2024-6133
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Customer Search
Medium
CVE-2024-38776
WP GoToWebinar <= 15.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Low
CVE-2024-6694
WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure
Medium
CVE-2024-2337
Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-6134
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Product Editing
High
CVE-2024-6637
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password
Medium
CVE-2024-38778
WP Fast Total Search <= 1.69.234 - Cross-Site Request Forgery
Medium
CVE-2024-6158
Category Posts Widget <= 4.9.16 & Pro < 4.9.13 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-6338
FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter
Medium
CVE-2024-5997
Duplica <= 0.6 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates Creation
Medium
CVE-2024-6455
ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function
Medium
CVE-2024-6481
Search & Filter Pro <= 2.5.17 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6799
YITH Essential Kit for WooCommerce #1 <= 2.34.0 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install, Activation, and Deactivation
High
CVE-2023-52209
WPForms User Registration <= 2.1.0 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.