Medium
CVE-2024-31103
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2024-3018
Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword
Medium
CVE-2024-30556
Mighty Classic Pros And Cons <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31118
SP Project & Document Manager <= 4.70 - Missing Authorization Stored Cross-Site Scripting
Medium
CVE-2024-24888
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2024-2143
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget
High
CVE-2024-1794
Forminator <= 1.29.0 - Unauthenticated Stored Cross-Site Scripting via File Upload
Medium
CVE-2024-2491
PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag*
Medium
CVE-2024-31087
pageMash > Page Management <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-30558
Add Shortcodes Actions And Filters <= 2.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-30524
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31120
Responsive Image Gallery, Gallery Album <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-30533
Layouts for Elementor <= 1.7 - Missing Authorization to Unauthenticated Arbitrary File Upload
Medium
CVE-2024-30543
Whizzy <= 1.1.18 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-31110
Contact Form 7 Newsletter <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-30550
Responsive Image Gallery, Gallery Album <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30537
WPC Badge Management for WooCommerce <= 2.4.0 - Missing Authorization
Medium
CVE-2024-31093
Broken Images <= 0.2 - Cross-Site Request Forgery
Medium
CVE-2024-30560
DX-Watermark <= 1.0.4 - Cross-Site Request Forgery
Medium
CVE-2024-30548
underConstruction <= 1.21 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-30534
Calendarista Basic Edition <= 3.0.5 - Missing Authorization
Medium
CVE-2024-30531
Nelio Content <= 3.2.0 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2024-30525
Move Addons for Elementor <= 1.2.9 - Missing Authorization
Medium
CVE-2024-31121
HeartThis <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.