Medium
CVE-2024-9111
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-11424
Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11447
Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <=7.0.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-45689
Moodle allows users to retrieve information they did not have permission to access
Medium
CVE-2024-45691
Moodle Lesson activity password bypass through PHP loose comparison
Medium
CVE-2024-48899
Moodle IDOR when accessing list of course badges
Medium
CVE-2024-45690
Moodle IDOR when deleting OAuth2 linked accounts
Medium
CVE-2024-10675
affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting
High
CVE-2024-52497
Shopready <= 3.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-9371
Branda – White Label & Branding, Custom Login Page Customizer <= 3.4.19 - Reflected Cross-Site Scripting
Medium
CVE-2024-52494
Dynamic "To Top" 3.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-10898
Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-24545
BSK Forms Validation <= 1.7 - Reflected Cross-Site Scripting
High
CVE-2024-52499
Pricing table addon for elementor <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-52489
Add Chat App Button <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-11088
Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor
Medium
CVE-2024-11385
Pure CSS Circle Progress bar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10393
Tutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User Registration
High
CVE-2024-10400
Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter
High
CVE-2024-52498
SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-10623
ForumEngine <= 1.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-11402
Block Editor Bootstrap Blocks <= 6.6.1 - Reflected Cross-Site Scripting via tab
High
CVE-2024-52496
Absolute Addons For Elementor <= 1.0.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-10671
Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.