Medium
CVE-2024-30182
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,406
Medium
CVE-2024-0902
Fancy Product Designer < 6.1.81 - Authenticated (Admin+) Stored Cross-Site Scripting via Product Title
Medium
CVE-2024-30183
Livemesh Addons for WPBakery Page Builder <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-2845
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer For Elementor & Gutenberg <= 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-29814
Exchange Rates Widget <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29009
Easy PopUp Show <= 0.12 - Cross-Site Request Forgery
Medium
CVE-2024-30194
Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-29909
Travelers' Map <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30178
Simply Static <= 3.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29804
Fancy Comments WordPress <= 1.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-29910
Dropdown Multisite selector <= 0.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-29798
Gratisfaction <= 4.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2864
Buddypress Moderation <= 1.2.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1849
WP Customer Reviews <= 3.7.0 - Authenticated (Contributor+) Malicious Redirect via HTTP-EQUIV Injection
Medium
CVE-2024-2170
VK All in One Expansion Unit <= 9.96.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className
Medium
CVE-2024-1846
Responsive Tabs <= 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29777
Forminator <= 1.29.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-29921
Photo Gallery by Supsystic <= 1.15.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29819
WPFront Notification Bar <= 3.3.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-29812
ReviewX <= 1.6.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29788
Podlove Web Player <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29764
Molongui <= 4.7.7 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-30201
WordPress Importer <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-29758
Co-marquage service-public.fr <= 0.5.72 - Reflected Cross-Site Scripting via search_term
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.