Medium
CVE-2024-47833
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Low
CVE-2024-47813
Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race
Medium
CVE-2024-47763
Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The run
Unrated
CVE-2024-13285
drupal/wkhtmltopdf - SA-CONTRIB-2024-049
Unrated
CVE-2024-13284
drupal/gutenberg - SA-CONTRIB-2024-048
Unrated
CVE-2024-13283
drupal/facets - SA-CONTRIB-2024-047
Unrated
CVE-2024-13282
drupal/block_permissions - SA-CONTRIB-2024-046
Unrated
CVE-2024-13281
drupal/monster_menus - SA-CONTRIB-2024-045
Medium
CVE-2024-9205
Maximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-9457
WP Builder <= 3.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-9581
Shortcodes AnyWhere <= 1.0.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-8729
Easy Social Share Buttons <= 1.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-8987
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode
Medium
CVE-2024-9067
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion
Medium
CVE-2024-9057
Curator.io: Show all your social media posts in a beautiful feed. <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via feed_id Attribute
Medium
CVE-2024-9064
Elementor Inline SVG <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9065
WP Helper Premium <= 4.6.1 - Missing Authorization in whp_smtp_send_mail_test
Medium
CVE-2024-9066
Marketing and SEO Booster <= 1.9.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9072
GDPR-Extensions-com – Consent Manager <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9074
Advanced Blocks Pro <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-28168
Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability
Medium
CVE-2024-9520
UserPlus <= 2.0 - Missing Authorization via Multiple Functions
Medium
CVE-2024-48023
Restaurant Reservations Widget <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-8477
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.