Critical
CVE-2024-3604
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 37
Reset filters
Medium
CVE-2024-3603
OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4663
OSM Map Widget for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Medium
CVE-2023-51679
BulkGate SMS Plugin for WooCommerce <= 3.0.2 - Missing Authorization via Multiple AJAX Actions
Medium
CVE-2023-49838
Multiple Themes by KlbTheme <= (Various Versions) - Cross-Site Request Forgery
Medium
CVE-2023-49839
Multiple Plugins by KlbTheme <= (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2022-4676
OSM - OpenStreetMap <= 6.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via 'osm_map' Shortcode
High
CVE-2022-30544
OSM - OpenStreetMap <= 6.0 - Cross-Site Request Forgery
Medium
CVE-2021-24978
OSMapper <= 2.1.5 - Unauthenticated Arbitrary Post Deletion
High
CVE-2022-23975
AccessPress Themes and Plugin <= Various Versions - Missing Authorization to Arbitrary Plugin Deactivation/Activation
High
59bf14a9-5abe-4b83-9364-d318eedaba83
AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery
High
CVE-2021-39317
AccessPress Themes and Plugin <= Various Versions - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2011-5307
Photosmash Plugin < 1.0.5 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.