Medium
CVE-2024-30559
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-2140
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget
Medium
CVE-2024-1051
List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-2086
Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export
Medium
CVE-2024-2847
WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2024-31116
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-31086
Change default login logo,url and title <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2024-31099
Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization
Critical
CVE-2024-31114
Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-30557
Aesop Story Engine <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31091
Custom Field Bulk Editor <= 1.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-2142
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget
Medium
CVE-2024-31098
New Order Notification for Woocommerce <= 2.0.2 - Missing Authorization
Medium
CVE-2024-31101
AI Twitter Feeds (Twitter widget & shortcode) <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30544
Whizzy <= 1.1.18 - Missing Authorization
Medium
CVE-2024-2794
Gutenberg Block Editor Toolkit – EditorsKit <= 1.40.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-31094
Filter Custom Fields & Taxonomies Light <= 1.05 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-30555
Ultimate Social Comments – Email Notification & Lazy Load <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2974
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31108
iFlyChat – WordPress Chat <= 4.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31089
Platinum SEO <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-30529
Tainacan <= 0.20.7 - Missing Authorization
Medium
CVE-2024-31090
Hacklog Down As PDF <= 2.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-31117
WooCommerce Bookings Calendar <= 1.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.