Medium
CVE-2024-54349
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2024-54330
Hurrakify <= 2.4 - Unauthenticated Server-Side Request Forgery
High
CVE-2024-12172
WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Update
Medium
CVE-2024-54316
Restaurant & Cafe Addon for Elementor <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54310
Gou Manage My Account Menu <= 1.0.1.8 - Missing Authorization
Low
CVE-2024-54382
Bold Page Builder <= 5.1.5 - Authenticated (Editor+) Path Traversal
Medium
CVE-2024-11765
WordPress Portfolio Plugin – A Plugin for Making Filterable Portfolio Grid, Portfolio Slider and more <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12072
Analytics Cat – Google Analytics Made Easy <= 1.1.2 - Reflected Cross-Site Scripting
High
CVE-2024-54282
WP Mega Menu <= 1.4.2 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2024-54323
New User Approve <= 2.6.2 - Missing Authorization
Medium
CVE-2024-54348
Brand <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54356
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery
Medium
CVE-2024-54381
Advance Menu Manager <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Medium
CVE-2024-54287
Advanced Blog Post Block <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54289
Awesome Support <= 6.3.1 - Missing Authorization
Medium
CVE-2024-54328
Invoice Payment for WooCommerce <= 1.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-54319
Kundgenerator <= 1.0.6 - Reflected Cross-Site Scripting
High
CVE-2024-54376
EazyDocs <= 2.8.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-54355
WP Mailster <= 1.8.17.0 - Cross-Site Request Forgery
Medium
CVE-2024-54357
Avada <= 7.11.10 - Cross-Site Request Forgery
Medium
CVE-2024-54364
Feedpress Generator <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-10583
Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54337
DX Dark Site <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54286
Smaily for WP <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.