High
CVE-2024-50508
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2024-8512
W3SPEEDSTER <= 7.26 - Authenticated (Administrator+) Remote Code Execution
Medium
CVE-2024-10181
Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode
Medium
CVE-2024-10233
SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode
Medium
CVE-2024-10185
StreamWeasels YouTube Integration <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-youtube-embed Shortcode
Medium
CVE-2024-10184
SW Kick Integration - Blocks and Shortcodes for Embedding Kick Streams <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-kick-embed Shortcode
Medium
CVE-2024-10227
affiliate-toolkit <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode
Medium
CVE-2024-9376
Kata Plus – Addons for Elementor – Widgets, Extensions and Templates <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-10436
WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2024-10437
WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation
Medium
CVE-2024-9438
SEUR Oficial <= 2.2.11 - Reflected Cross-Site Scripting
Low
CVE-2024-49755
Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs
Medium
CVE-2024-49771
MPXJ has a Potential Path Traversal Vulnerability
Medium
CVE-2024-10000
Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality
High
CVE-2024-10008
Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalation
High
CVE-2024-10455
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block
Critical
CVE-2024-38821
Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications
Medium
CVE-2024-50611
CycloneDX cdxgen may execute code contained within build-related files
High
CVE-2024-50511
WP donimedia carousel <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-10360
Move Addons for Elementor <= 1.3.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
High
CVE-2024-50504
Bulk Change Role <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2024-9989
Crypto <= 2.18 - Authentication Bypass via log_in
Medium
CVE-2024-10312
Exclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-5030
CM Table Of Contents <= 1.2.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.