Medium
CVE-2024-29908
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
Medium
CVE-2024-27188
Breeze <= 2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via breeze_api_token
Medium
CVE-2024-29906
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1754
NPS computy <= 2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-1587
Newsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content
Medium
CVE-2024-2623
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29773
BizPrint <= 4.5.4 - Cross-Site Request Forgery to Cross-Site Scripting via process.php
Medium
CVE-2024-29794
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-29774
WP Directory Kit <= 1.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-29776
EventPrime <= 3.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29763
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-29915
Podlove Podcast Publisher <= 4.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-6067
WP User Profile Avatar <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-29793
MailChimp Forms by MailMunch <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-2739
Advance Search <= 1.1.6 - Cross-Site Request Forgery to Shortcode Deletion
Medium
CVE-2024-29775
Frontend Dashboard <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-29768
Astra <= 4.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Theme Header/Footer
Medium
CVE-2024-29927
WishSuite <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29770
Shortlinks by Pretty Links <= 3.6.2 - Reflected Cross-Site Scripting via post_status
Medium
CVE-2024-29911
Master Addons for Elementor <= 2.0.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29934
Piotnet Addons For Elementor <= 2.4.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29772
MyBookTable Bookstore <= 3.3.7 - Authenticated (Author+) Stored Cross-Site Scripting
Critical
CVE-2024-0399
WooCommerce Customers Manager <= 29.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-29807
DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via force_fit
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.