Medium
CVE-2024-0910
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-5001
Image Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters
Medium
CVE-2024-2350
Clever Addons for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple CAFE Widgets
Medium
CVE-2024-5342
Simple Image Popup Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4942
Custom Dash <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5224
Easy Social Like Box – Popup – Sidebar Widget <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4788
Boostify Header Footer Builder for Elementor <= 1.3.5 - Missing Authorization to Page/Post Creation
Medium
CVE-2024-5473
Simple Photoswipe <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4758
Muslim Prayer Time BD <= 2.4 - Cross-Site Request Forgery to Settings Reset
Critical
CVE-2024-35677
MegaMenu <= 2.3.12 - Unauthenticated Local File Inclusion
Medium
CVE-2024-4957
Frontend Checklist <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-2017
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-4959
Frontend Checklist <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Items
Medium
CVE-2024-35675
Advanced Woo Labels – Product Labels for WooCommerce <= 1.93 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-35678
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress <= 1.7.2 - Authenticated (Author+) SQL Injection
Medium
CVE-2024-35673
Pure Chat – Live Chat Plugin & More! <= 2.22 - Cross-Site Request Forgery
Medium
CVE-2024-6718
PVN Auth Popup <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5071
Bookster – WordPress Appointment Booking Plugin <= 1.1.0 - Unauthenticated Appointment Manipulation
Medium
CVE-2024-35674
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2024-35676
Recurring PayPal Donations <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4704
Contact Form 7 <= 5.9.4 - Unauthenticated Open Redirect
High
CVE-2023-6966
The Moneytizer <= 9.6.3 - Missing Authorization via multiple AJAX actions
Medium
CVE-2024-3633
WebP & SVG Support <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-5188
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.