High
CVE-2024-31621
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-2752
Where Did You Hear About Us Checkout Field for WooCommerce <= 1.3.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
High
CVE-2024-2663
ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery
Medium
CVE-2024-3743
Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33925
Embed Google Fonts <= 3.1.0 - Missing Authorization
High
CVE-2024-4185
Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness
Medium
CVE-2024-33914
Exclusive Addons Elementor <= 2.6.9.1 - Missing Authorization to Post Duplication
Medium
CVE-2024-2960
SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Deletion
Medium
CVE-2024-33917
WTI Like Post <= 1.4.6 - IP Spoofing
Medium
CVE-2024-33927
Giphypress <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2349
Fancy Elementor Flipbox <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Elementor Flipbox Widget
Medium
CVE-2024-2401
Admin Page Spider <= 3.31 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-1679
Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce <= 3.4.6 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Templates
Medium
CVE-2024-3550
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-33913
Xserver Migrator <= 1.6.2 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-33926
GWP-Histats <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33924
Realtyna Organic IDX plugin <= 4.14.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-33920
Democracy Poll <= 6.0.3 - Missing Authorization
Medium
CVE-2024-33928
CodeBard's Patron Button and Widgets for Patreon <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-4265
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2024-2797
MailerLite – Signup forms (official) <= 1.7.6 - Missing Authorization
Medium
CVE-2024-33938
Sliding Widgets <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-33918
AJAX Login and Registration modal popup + inline form <= 2.23 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-33953
Adventure Journal <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.