Medium
CVE-2024-51704
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-51703
WP-Basics <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-51707
WP Visual Adverts <= 2.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-10340
Shortcodes Blocks Creator Ultimate <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-51781
Firework Shoppable Live Video <= 6.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-51714
User Password Reset <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-51705
WP MMenu Lite <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-51784
FriendStore for WooCommerce <= 1.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-51780
eewee admin custom <= 1.8.2.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-10710
YaDisk Files <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-10114
Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider
High
CVE-2024-10263
Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-9657
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-10676
Conversion Helper <= 1.12 - Reflected Cross-Site Scripting
High
CVE-2024-10097
Loginizer Security and Loginizer <= 1.9.2 - Authentication Bypass via WordPress.com OAuth provider
Medium
CVE-2024-6393
NextGEN Gallery <= 3.39.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-51711
Saragna <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-51759
SVT Simple <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-51719
Simplistic SEO <= 2.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-51782
Loginplus <= 1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-10329
Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure
High
CVE-2024-10709
YaDisk Files <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-10319
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
Medium
CVE-2024-51697
Doofinder <= 0.5.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.