Medium
CVE-2024-11455
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-11432
SuevaFree Essential Kit <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11435
salavat counter Plugin <= 0.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-9851
LSX Tour Operator <= 1.4.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-11414
RecipePress Reloaded <= 2.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11416
WIP Incoming Lite <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-11440
Grey Owl Lightbox <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11409
Grid View Gallery <= 1.0 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2024-9442
F4 Improvements <= 1.9.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10696
UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.8 - Insecure Direct Object Reference to Sensitive Information Exposure via UA_Template Shortcode
Medium
CVE-2024-11412
Shine PDF Embeder <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11428
Lazy load videos and sticky control <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10726
Friendly Functions for Welcart <= 1.2.4 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-10682
Bulletin Announcements <= 3.11.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-11388
Dino Game – Embed Google Chrome Dinosaur Game in WordPress <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9111
Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-11424
Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11447
Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <=7.0.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-45689
Moodle allows users to retrieve information they did not have permission to access
Medium
CVE-2024-45691
Moodle Lesson activity password bypass through PHP loose comparison
Medium
CVE-2024-48899
Moodle IDOR when accessing list of course badges
Medium
CVE-2024-45690
Moodle IDOR when deleting OAuth2 linked accounts
Medium
CVE-2024-10675
affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting
High
CVE-2024-52497
Shopready <= 3.5 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.