Critical
CVE-2024-33553
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-33594
Leaky Paywall <= 4.20.8 - Missing Authorization to Price Manipulation
High
CVE-2024-3641
Newsletter Popup <= 1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-33558
XStore Core <= 5.3.8 - Authenticated (Subscriber+) Limited Arbitrary File Download
Medium
CVE-2024-3197
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Medium
CVE-2024-33652
Client Dash <= 2.2.1 - Missing Authorization
Medium
CVE-2024-3199
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Medium
CVE-2024-33562
XStore <= 9.3.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-3642
Newsletter Popup <= 1.2 - Cross-Site Request Forgery to Subscriber Deletion
Medium
CVE-2024-33640
Pretty Google Calendar <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-33560
XStore <= 9.3.8 - Unauthenticated Local File Inclusion
Medium
CVE-2024-33589
KB Support <= 1.6.0 - Missing Authorization
Medium
CVE-2024-33595
Master Addons for Elementor <= 2.0.5.4.1 - Missing Authorization on Duplicate Post
Medium
CVE-2024-33548
WooCommerce Amazon Affiliates - Wordpress Plugin < 14.1.00 - Reflected Cross-Site Scripting
High
CVE-2024-33557
XStore Core <= 5.3.8 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2024-33540
ColorNews <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3473
Header Footer Code Manager Pro <= 1.0.16 - Reflected Cross-Site Scripting via message
Medium
CVE-2024-33645
Easy Set Favicon <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-33630
Piotnet Addons For Elementor <= 2.4.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-33644
Customify Site Library <= 0.0.9 - Unauthenticated Remote Code Execution
Medium
CVE-2024-33572
The Plus Blocks for Block Editor | Gutenberg <= 3.2.5 - Missing Authorization
Medium
CVE-2024-33651
MF Gig Calendar <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2024-33598
Annual Archive <= 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-33586
Photo Gallery by 10Web <= 1.8.20 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.