Medium
CVE-2024-47762
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-9384
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9345
Product Delivery Date for WooCommerce – Lite <= 2.7.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-9421
Login Logout Shortcode <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter
Medium
CVE-2024-9445
Display Medium Posts <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via display_medium_posts Shortcode
Medium
CVE-2024-9375
WordPress Captcha Plugin by Captcha Bank <= 4.0.36 - Reflected Cross-Site Scripting
Medium
CVE-2024-9368
Aggregator Advanced Settings <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-8802
Clio Grow <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9372
WP Blocks Hub <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Critical
CVE-2024-47561
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK)
High
CVE-2024-47554
Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader
Medium
CVE-2024-8670
Photo Gallery by 10Web <= 1.8.28 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-9242
Memberful – Membership Plugin <= 1.73.7 - Authenticated (contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9435
ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting
Medium
CVE-2024-9236
Team – Team Members Showcase Plugin <= 4.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9237
Fish and Ships <= 1.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-8804
Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9233
Logo Slider <= 3.7.0 - Cross-Site Request Forgery
Medium
CVE-2024-8519
Ultimate Member <= 2.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9204
Smart Custom 404 Error Page <= 11.4.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-8499
Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice
Medium
CVE-2024-8520
Ultimate Member <= 2.8.6 - Cross-Site Request Forgery to Membership Status Change
Medium
CVE-2024-9349
Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9353
Popularis Extra <= 1.2.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.