Medium
CVE-2024-47525
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Low
CVE-2024-47526
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature
Medium
CVE-2024-47527
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature
Medium
CVE-2024-9172
Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-8967
PWA — easy way to Progressive Web App <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-45967
Pagekit Cross-site Scripting vulnerability
Medium
CVE-2024-21531
git-shallow-clone Argument Injection vulnerability
High
CVE-2024-21489
uPlot Prototype Pollution vulnerability
Medium
CVE-2024-9218
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site Scripting
Medium
CVE-2024-8800
RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more <= 2.21.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9210
MC4WP: Mailchimp Top Bar <= 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9378
YML for Yandex Market <= 4.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-8254
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
High
CVE-2024-7855
WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-9222
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-9225
SEOPress – On-site SEO <= 8.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-9344
BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-9060
AVIF & SVG Uploader <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9118
QS Dark Mode Plugin <= 2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-8793
Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More <= 2.7.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-9241
PDF Image Generator <= 1.5.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-9228
Loggedin – Limit Active Logins <= 1.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-8799
Custom Banners <= 3.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-9209
WP Search Analytics <= 1.4.10 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.