Medium
CVE-2024-49275
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-49234
Plexx Elementor Extension <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49220
Cookie Scanner <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-9687
WP 2FA with Telegram <= 3.0 - Authenticated (Subscriber+) Authentication Bypass
High
CVE-2024-49260
WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-49263
My Favorites <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49270
Smart Blocks <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49261
Arkhe Blocks <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-48047
Linked Variation for WooCommerce <= 1.0.5 - Cross-Site Request Forgery
Medium
CVE-2024-49269
my flatonica <= 0.0.8 & my wooden under construction <= 2.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-48043
ShortPixel Image Optimizer <= 5.6.3 - Authenticated (Editor+) SQL Injection
High
CVE-2024-48042
Contact Form by Supsystic <= 1.7.28 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2024-48045
Happy Addons for Elementor <= 3.12.3 - Missing Authorization
Medium
CVE-2024-48044
ShortPixel Image Optimizer <= 5.6.3 - Missing Authorization
Critical
CVE-2023-25581
pac4j-core affected by a Java deserialization vulnerability
High
CVE-2024-8757
Boost Your Blog's Engagement with WP Post Author <= 3.8.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-9595
TablePress <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-8760
Stackable – Page Builder Gutenberg Blocks <= 3.13.6 - Unauthenticated CSS Injection
Medium
CVE-2024-8915
Category Icon <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-6985
A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personality_folder on the vi
Critical
CVE-2024-42640
angular-base64-upload vulnerable to unauthenticated remote code execution
Medium
CVE-2024-9756
Order Attachments for WooCommerce 2.0 - 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Upload
High
CVE-2024-47875
DOMpurify has a nesting-based mXSS
Medium
CVE-2024-9776
ImagePress - Image Gallery <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.