Medium
CVE-2024-30485
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-30451
Geo Controller <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-2411
MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal
Medium
CVE-2024-0956
WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection
Medium
CVE-2024-30514
Paid Memberships Pro – Payfast Gateway Add On <= 1.4.1 - Unauthenticated Information Exposure
High
CVE-2024-1872
Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode
Medium
CVE-2024-30503
Mailster <= 1.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30434
WP-CRM System <= 3.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6965
Pods - Custom Content Types and Fields - Missing Authorization
Medium
CVE-2024-30517
Sliced Invoices <= 3.9.2 - Missing Authorization
Medium
CVE-2024-2844
Easy Appointments <= 3.11.18 - Insufficient Authorization
Medium
CVE-2024-30447
Creative Image Slider – Responsive Slider Plugin <= 2.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30470
YITH WooCommerce Account Funds Premium <= 1.33.0 - Missing Authorization
Medium
CVE-2024-30455
GamiPress <= 6.8.5 - Cross-Site Request Forgery
Medium
CVE-2024-30506
All In One Redirection <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-30439
Limit Attempts by BestWebSoft <= 1.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-30513
ProfileGrid <= 5.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-30422
Elementor Addon Elements <= 1.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-15295
Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-30453
Brave Popup Builder <= 0.6.5 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-30425
Beaver Builder <= 2.7.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2964
Pocket News Generator <= 0.2.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-30481
JCH Optimize <= 4.0.0 - Missing Authorization
Medium
CVE-2024-2842
Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.