Medium
CVE-2024-1054
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-25903
Frontend File Manager <= 22.7 - Sensitive Information Exposure via user uploads
Medium
CVE-2024-25902
Malware Scanner <= 4.7.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-25101
Maspik – Spam blacklist <= 0.10.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-1276
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1322
Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change
Critical
CVE-2024-25096
Canto <= 3.0.6 - Remote File Inclusion to Code Execution
Medium
CVE-2024-1070
SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-25097
TNC PDF viewer <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-1160
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link
Medium
CVE-2024-25094
PJ News Ticker <= 1.9.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Critical
CVE-2024-25912
MoveTo <= 6.2 - Missing Authorization to Unauthenticated Options Update
Medium
CVE-2024-25908
WP Media folder <= 5.7.2 - Missing Authorization to Authenticated(Subscriber+) Title Modification
Medium
CVE-2024-25597
Ultimate Reviews <= 3.2.8 - Unauthenticated stored Cross-Site Scripting via reviews
Medium
CVE-2024-25591
WP Editor <= 1.2.7 - Sensitive Information Exposure via log file
Medium
CVE-2024-25904
TinyMCE Professional Formats and Styles <= 1.1.2 - Cross-Site Request Forgery via bb_taps_backend_page
Medium
CVE-2024-25914
SMTP Mail Plugin <= 1.3.20 - Cross Site Request Forgery
Medium
CVE-2024-25915
Pexels: Free Stock Photos <= 1.2.2 - Authenticated (Contributor+) Server-Side Request Forgery
Critical
CVE-2024-25913
MoveTo <= 6.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-25598
Livemesh Addons for Elementor <= 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via animated_text_class
Medium
CVE-2024-1236
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-25905
Multi Step Form <= 1.7.18 - Cross-Site Request Forgery
Medium
CVE-2024-25906
Comments Like Dislike <= 1.2.2 - IP Spoofing
Medium
CVE-2024-1337
SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.