Medium
CVE-2024-52420
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 90
Reset filters
Medium
CVE-2024-7622
Revision Manager TMC <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Medium
CVE-2024-37121
Shortcode Addons <= 3.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5533
Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5892
Divi Torque Lite – Divi Theme and Extra Theme <= 3.6.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Medium
CVE-2024-5501
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4378
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider
Medium
CVE-2024-4490
Elegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-4334
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting
Critical
CVE-2024-31114
Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-1984
Graphene <= 2.9.2 - Missing Authorization
Medium
CVE-2023-6744
Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47689
Animator <= 3.0.10 - Missing Authorization to Plugin Settings Update
Medium
CVE-2023-46188
Freesoul Deactivate Plugins <= 2.1.3 - Cross-Site Request Forgery via eos_dp_pro_delete_transient
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-29099
Divi <= 4.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-0820
User Role by BestWebSoft <= 1.6.6 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2023-1263
CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure
Medium
CVE-2023-27437
Event Espresso 4 Decaf <= 4.10.44.decaf - Feature Bypass
Medium
c0e58807-bccc-469f-82c3-a4bbf088a626
Yoast SEO <= 20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-25022
Watu Quiz <= 3.3.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Low
CVE-2023-22687
Freesoul Deactivate Plugins <= 1.9.4.0 - Information Disclosure
Medium
CVE-2022-4239
Workreap <= 2.6.3 - Insecure Direct Object Reference
High
CVE-2022-33142
Better Messages <= 1.9.10.57 - Resource Exhaustion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.