Medium
CVE-2024-11361
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,598
Medium
CVE-2024-11426
AutoListicle: Automatically Update Numbered List Articles <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53718
Multi Feed Reader <= 2.2.4 - Cross-Site Request Forgery
High
CVE-2024-9941
WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-53719
Zajax – Ajax Navigation <= 0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-10606
WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
Medium
CVE-2024-53716
wp auto top <= 2.9.3 - Cross-Site Request Forgery
Medium
CVE-2024-53707
Ahmeti Wp Güzel Sözler <= 4.0 - Cross-Site Request Forgery
Medium
CVE-2024-53726
RealtyCandy IDX Broker Extended <= 1.5.1 - Cross-Site Request Forgery
Critical
CVE-2024-9511
FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection
Medium
CVE-2024-10537
WP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Authenticated (Subscriber+) User Meta Key Enumeration
Medium
CVE-2024-53712
Kevin's <= 2.0.0 - Cross-Site Request Forgery
Medium
CVE-2024-11332
HIPAA Compliant Forms with Drag’n’Drop HIPAA Form Builder. Sign HIPAA documents <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11620
Rank Math SEO <= 1.0.231 - .htaccess File Manipulation to Remote Code Execution
Medium
CVE-2024-53710
ITERAS <= 1.8.0 - Cross-Site Request Forgery
Medium
CVE-2024-11387
Easy Liveblogs <= 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11362
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.112.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11408
Slotti Ajanvaraus <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53725
Post Hits Counter <= 2.8.23 - Reflected Cross-Site Scripting
Medium
CVE-2024-53714
Continue Shopping From Cart <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-53723
Google Plus Share and +1 Button <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2024-53711
Hotlink2Watermark <= 0.3.2 - Cross-Site Request Forgery
Medium
CVE-2024-53720
WP-ISPConfig 3 <= 1.5.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-10873
LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.