High
CVE-2024-6637
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-38778
WP Fast Total Search <= 1.69.234 - Cross-Site Request Forgery
Medium
CVE-2024-6158
Category Posts Widget <= 4.9.16 & Pro < 4.9.13 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-6338
FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter
Medium
CVE-2024-5997
Duplica <= 0.6 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates Creation
Medium
CVE-2024-6455
ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function
Medium
CVE-2024-6481
Search & Filter Pro <= 2.5.17 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6799
YITH Essential Kit for WooCommerce #1 <= 2.34.0 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install, Activation, and Deactivation
High
CVE-2023-52209
WPForms User Registration <= 2.1.0 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2024-5977
GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions
Medium
CVE-2024-6884
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown
High
CVE-2024-3242
Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2024-5726
Timeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-6705
RegLevel <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5964
Zenon Lite <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Medium
CVE-2024-6175
Booking Ultra Pro <= 1.1.13 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates
Medium
CVE-2024-6599
Meks Video Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) API Keys Modification
Medium
CVE-2024-5555
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39682
Cooked – Recipe Management <= 1.7.15.4 - Authenticated (Contributor+) HTML Injection
Medium
CVE-2024-39679
Cooked – Recipe Management <= 1.7.15.4 - Cross-Site Request Forgery to Template Reset
Medium
CVE-2023-6708
SVG Support <= 2.5.7 - Authenticated (Author+) Cross-Site Scripting via SVG
Medium
CVE-2024-5554
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35761
vCita Online Booking & Scheduling Calendar <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39681
Cooked – Recipe Management <= 1.7.15.4 - Cross-Site Request Forgery to Template Apply
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.