Medium
CVE-2024-5977
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-6884
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown
High
CVE-2024-3242
Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2024-5726
Timeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-6705
RegLevel <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5964
Zenon Lite <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Medium
CVE-2024-6175
Booking Ultra Pro <= 1.1.13 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates
Medium
CVE-2024-6599
Meks Video Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) API Keys Modification
Medium
CVE-2024-5555
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39682
Cooked – Recipe Management <= 1.7.15.4 - Authenticated (Contributor+) HTML Injection
Medium
CVE-2024-39679
Cooked – Recipe Management <= 1.7.15.4 - Cross-Site Request Forgery to Template Reset
Medium
CVE-2023-6708
SVG Support <= 2.5.7 - Authenticated (Author+) Cross-Site Scripting via SVG
Medium
CVE-2024-5554
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35761
vCita Online Booking & Scheduling Calendar <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-39681
Cooked – Recipe Management <= 1.7.15.4 - Cross-Site Request Forgery to Template Apply
Medium
CVE-2024-39680
Cooked – Recipe Management <= 1.7.15.4 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2024-6220
简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-5703
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization
Medium
CVE-2024-5582
Schema & Structured Data for WP & AMP <= 1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Medium
CVE-2024-5254
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-6669
AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5255
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5252
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5253
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.