Medium
CVE-2024-43217
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-43216
Filr – Secure document library <= 1.2.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43220
Form Maker by 10Web <= 1.15.26 - Reflected Cross-Site Scripting
Medium
CVE-2024-7574
Christmasify! <= 1.5.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-43236
Easy PayPal Buy Now Button <= 1.9 - Unauthenticated Open Redirect
Medium
CVE-2024-43214
myCred <= 2.7.2 - Unauthenticated Information Exposure
Medium
CVE-2024-43235
Meta Box – WordPress Custom Fields Framework <= 5.9.10 - Missing Authorization to Information Exposure
High
CVE-2024-43221
JetGridBuilder <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43215
Social Slider Feed <= 2.2.2 - Missing Authorization
Medium
CVE-2024-43212
WpTravelly <= 1.7.7 - Missing Authorization
Medium
CVE-2024-1286
Paid Memberships Pro - Membership Maps Add On < 0.7 - Authenticated (contributor+) Information Disclosure
Medium
CVE-2024-43208
Send Emails with Mandrill <= 1.4.1 - Missing Authorization
Medium
CVE-2024-43211
MailChimp Subscribe Forms <= 4.0.9.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43209
Bitly's WordPress Plugin <= 2.7.2 - Missing Authorization
Medium
CVE-2024-43223
EventPrime <= 4.0.3.2 - Missing Authorization via calendar_event_create()
Medium
CVE-2024-43224
YaMaps for WordPress <= 0.6.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43231
Tutor LMS <= 2.7.3 - Authenticated (Instructor+) Stored Cross-Site Scripting
Medium
CVE-2024-43225
Enter Addons <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6639
MDx <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via mdx_list_item Shortcode
High
CVE-2024-37099
GiveWP <= 3.14.1 - Unauthenticated PHP Object Injection
High
CVE-2024-8703
Z-Downloads <= 1.11.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-43229
WP Search Analytics <= 1.4.9 - Missing Authorization
Medium
CVE-2024-43226
WP Dashboard Notes <= 1.0.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-6691
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Currency Settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.