Medium
CVE-2024-31275
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-2949
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode'
Medium
CVE-2024-31270
ARForms Form Builder <= 1.6.1 - Missing Authorization
Medium
CVE-2024-31235
WordPress Comments Import & Export <= 2.3.5 - Cross-Site Request Forgery
Medium
CVE-2024-31304
WC Marketplace <= 4.1.3 - Missing Authorization
High
CVE-2024-31300
Easy Social Share Buttons <= 9.4 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2024-3076
MM-email2image <= 0.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-31273
JS Help Desk – Best Help Desk & Support Plugin <= 2.8.3 - Missing Authorization
Critical
CVE-2024-24882
Masteriyo - LMS <= 1.7.2 - Unauthenticated Privilege Escalation
High
CVE-2024-31280
Church Admin <= 4.1.5 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-31306
Essential Blocks for Gutenberg <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3059
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery to Campaign Deletion
Critical
CVE-2024-31266
Advanced Order Export For WooCommerce <= 3.4.4 - Authenticated (Shop Manager+) Remote Code Execution
Critical
CVE-2024-31286
WP Photo Album Plus <= 8.6.03.004 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-31297
Wholesale For WooCommerce <= 2.3.0 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-31350
AWP Classifieds <= 4.3.1 - Missing Authorization
Medium
CVE-2024-3244
EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-31244
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Update
Medium
CVE-2024-3075
MM-email2image <= 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-31242
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Medium
CVE-2024-31298
User Spam Remover <= 1.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31259
SearchIQ <= 4.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-3188
Shortcodes Ultimate <= 7.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31250
WP Server Health Stats <= 1.7.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.