High
CVE-2023-7046
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-2735
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element
Medium
CVE-2024-2655
Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
Medium
CVE-2024-2734
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features
Medium
63f26380-0bc2-4fe7-9e9d-05c688c201f9
Gutenberg 12.9.0 - 18.0.0 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block
Medium
CVE-2024-2539
Elementor Addons by Livemesh <= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget _id attribute
Medium
CVE-2024-1041
WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Settings
Medium
CVE-2024-31368
Soledad <= 8.4.5 - Missing Authorization
Medium
CVE-2024-31366
Post Type Builder < 2.1.4 - Missing Authorization to Arbitrary Post/Page Creation
Medium
CVE-2024-31367
Soledad <= 8.4.5 - Missing Authorization
High
CVE-2024-2018
WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-2733
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
Medium
CVE-2024-2666
Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-0376
Premium Addons for Elementor <= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget
High
CVE-2024-1774
Customily Product Personalizer <= 1.23.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-31447
Shopware Improper Session Handling in store-api account logout
Medium
CVE-2024-31359
Premmerce Product Filter for WooCommerce <= 3.7.2 - Missing Authorization
Medium
CVE-2024-31375
WP2LEADS <= 3.2.7 - Missing Authorization
Medium
CVE-2024-2306
Revslider <= 6.6.20 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-31357
Ultimate Store Kit Elementor Addons <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31358
5 star review funnel for Google Reviews, Trustpilot, ProvenExpert and more | RRatingg <= 1.2.67 - Missing Authorization
Medium
CVE-2024-29220
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31364
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Cross-Site Request Forgery
Medium
CVE-2024-26019
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.