Medium
CVE-2024-37517
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-37522
CC & BCC for Woocommerce Order Emails <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37518
The Events Calendar <= 6.5.1.4 - Cross-Site Request Forgery via action_restore_events
Medium
CVE-2024-37537
WS Contact Form <= 1.3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37512
NEX-Forms – Ultimate Form Builder <= 8.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37519
Premium Blocks – Gutenberg Blocks for WordPress <= 2.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-37502
WooCommerce Social Login <= 2.6.3 - Unauthenticated PHP Object Injection
High
CVE-2024-37513
WPCafe <= 2.2.27 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37514
CopySafe Web Protection <= 3.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37516
Featured Image from URL <= 4.8.2 - Missing Authorization
Medium
CVE-2024-37515
XPlainer - WooCommerce Product FAQ <= 1.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-37521
zBench <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37511
Swift Performance Lite <= 2.3.6.20 - Cross-Site Request Forgery
Medium
CVE-2024-35773
Comment Reply Email <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-37520
ShopBuilder – Elementor WooCommerce Builder Addons <= 2.1.12 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37481
The Post Grid <= 7.7.4 - Missing Authorization via REST API
Medium
CVE-2024-37509
MakeCommerce for WooCommerce <= 3.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-37510
Charitable <= 1.8.1.7 - Missing Authorization via ajax_license_check()
Medium
CVE-2024-37507
Eventin <= 3.3.57 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-37490
Bard <= 2.210 - Cross-Site Request Forgery to Notice Dismissal
Critical
CVE-2024-37494
Youzify <= 1.2.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-7761
Simple Job Board <= 2.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-37499
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37934
Ninja Forms <= 3.8.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.