Medium
CVE-2024-5686
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-4626
JetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters
Medium
CVE-2024-1168
SEOPress – On-site SEO <= 7.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Social Image URL
Medium
CVE-2024-3558
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]
High
CVE-2024-3562
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field
High
CVE-2024-3561
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field
Medium
CVE-2024-4742
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-3605
WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection
Medium
CVE-2024-3602
Pop ups, Exit intent popups, email popups, banners, bars, countdowns and cart savers – Promolayer <= 1.1.0 - Missing Authorization
High
CVE-2024-3597
Export WP Page to Static HTML/CSS <= 2.2.2 - Open Redirect
Medium
CVE-2024-3627
Wheel of Life: Coaching and Assessment Tool for Life Coach <= 1.1.7 - Missing Authorization on Several AJAX Endpoints
Medium
CVE-2024-5058
Typing Text <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-4098
Shariff Wrapper <= 4.6.13 - Unauthenticated Local File Inclusion
High
CVE-2024-35778
Slideshow SE <= 2.5.17 - Authenticated (Author+) Limited Local File Inclusion
High
CVE-2024-35780
Page Builder: Live Composer <= 1.5.42 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-5156
Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-3204
Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update
Medium
CVE-2024-5059
Event Management Tickets Booking <= 1.4.3 - Unauthenticated Information Exposure
High
CVE-2024-35781
Word Balloon <= 4.21.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-5036
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-35776
phpinfo() WP <= 5.0 - Unauthenticated Information Exposure
High
CVE-2024-5605
Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter
Critical
CVE-2024-5432
Lifeline Donation <= 1.2.6 - Authentication Bypass
Medium
CVE-2024-35779
Page Builder: Live Composer <= 1.5.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.