Medium
CVE-2024-3344
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-31933
Page Builder: Live Composer <= 1.5.35 - Cross-Site Request Forgery
Medium
CVE-2024-31426
Inline Related Posts <= 3.3.1 - Cross-Site Request Forgery
Medium
CVE-2024-31929
Intagrate Lite <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31388
Table & Contact Form 7 Database – Tablesome <= 1.0.25 - Cross-Site Request Forgery
Medium
CVE-2024-31930
Save as PDF <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31427
Marker.io <= 1.1.8 - Cross-Site Request Forgery
Medium
CVE-2024-31923
Feather Login Page <= 1.1.5 - Cross-Site Request Forgery via saveData()
Medium
CVE-2024-31387
Popup Like box – Page <= 3.7.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-2765
Ultimate Member <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-31934
Link Whisper Free <= 0.6.9
Medium
CVE-2024-31378
MailChimp Forms by MailMunch <= 3.2.1 - Cross-Site Request Forgery
Medium
CVE-2024-31926
Advanced Cron Manager – debug & control <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31421
Popup by Supsystic <= 1.10.27 - Missing Authorization
Medium
CVE-2024-31921
Ultimate Product Catalogue <= 5.2.15 - Cross-Site Request Forgery via reset_settings()
Medium
CVE-2024-3343
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
Medium
CVE-2024-31379
Smash Balloon Social Post Feed <= 4.2.1 - Cross-Site Request Forgery
Medium
CVE-2024-31935
Simple Post Notes <= 1.7.6 - Cross-Site Request Forgery
Medium
CVE-2024-31937
TWIPLA (Visitor Analytics IO) <= 1.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31373
e2pdf <= 1.20.27 - Cross-Site Request Forgery
Medium
CVE-2024-31434
Newsletter <= 8.0.6 - Cross-Site Request Forgery
Medium
CVE-2024-31927
WP Login and Logout Redirect <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31936
UsersWP <= 1.2.4 - Cross-Site Request Forgery
Medium
CVE-2024-31385
ReDi Restaurant Reservation <= 24.0128 - Cross-Site Request Forgery via redi_restaurant_admin_options_page()
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.