Medium
CVE-2024-57719
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2024-13408
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-13119
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13121
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10324
RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-13354
Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13120
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13680
Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12770
WP ULike <= 4.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-12586
Chalet-Montagne.com Tools <= 2.7.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-11913
Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Medium
CVE-2024-13659
Listamester <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13335
Sastra Essential Addons for Elementor – Free Elementor Addons, Widgets and Templates <= 1.0.14 - Missing Authorization to Spexo Theme Install
Medium
CVE-2024-13542
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13594
Simple Downloads List <= 1.4.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-13572
Precious Metals Charts and Widgets for WordPress <= 1.2.8 - Authenticated (Contributor+) Stored Cross-site Scripting
Medium
CVE-2024-13698
Jobify - Job Board WordPress Theme <= 4.2.7 - Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image Generation
Medium
CVE-2024-13583
Simple Gallery with Filter <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13422
SEO Blogger to WordPress Migration using 301 Redirection <= 0.4.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-12118
The Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13389
Cliptakes <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56923
Cross site scripting in Silverpeas Core
Medium
CVE-2024-13340
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13511
Variation Swatches for WooCommerce 1.0.8 - 1.3.2 - Cross-Site Request Forgery to Plugin Settings Reset
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.