High
CVE-2024-55990
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2024-55986
Service <= 1.0.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-54441
Utech World Time <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56009
Spreadr Woocommerce <= 1.0.4 - Missing Authorization
High
CVE-2024-55975
Dr Affiliate <= 1.2.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-54350
hmd <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56005
Posti Shipping <= 3.10.3 - Cross-Site Request Forgery
Medium
CVE-2024-55997
Order Delivery & Pickup Location Date Time ( Free Version ) <= 1.1.0 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2024-55889
thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames
High
CVE-2024-55887
Ucum-java has an XXE vulnerability in XML parsing
High
CVE-2024-55661
Laravel Pulse Allows Remote Code Execution via Unprotected Query Method
High
CVE-2024-10646
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject
Medium
CVE-2024-12458
Smart PopUp Blaster <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11883
Connatix Video Embed <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11751
TCBD Popover <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11770
Post Carousel & Slider <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11888
IDer Login for WordPress <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11869
Buk for WordPress <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11462
Filestack Official <= 2.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11877
Cricket Live Score <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11894
The Permalinker <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11884
Wp photo text slider 50 <= 8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12555
SIP Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12502
My IDX Home Search <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.