Medium
CVE-2024-47395
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-47646
Payflex Payment Gateway <= 2.6.1 - Open Redirect
High
CVE-2024-7433
Empowerment <= 1.0.2 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-8625
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.3.9 - Authenticated (Admin+) SQL Injection
High
CVE-2024-47374
LiteSpeed Cache <= 6.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-47648
EventPrime <= 4.0.4.5 - Open Redirect
Medium
CVE-2024-47373
LiteSpeed Cache <= 6.5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47385
Essential Blocks for Gutenberg <= 4.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9224
Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2024-47359
Depicter Slider <= 3.2.2 - Missing Authorization
Medium
CVE-2024-47650
WP-WebAuthn <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47355
Cozy Blocks <= 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47637
LiteSpeed Cache <= 6.4.1 - Authenticated (Author+) Path Traversal
Medium
CVE-2024-47643
Include Fussball.de Widgets <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7869
123.chat - Video Chat <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2024-9106
Wechat Social login <= 1.3.0 - Authentication Bypass
Medium
CVE-2024-47349
WPMobile.App <= 11.50 - Reflected Cross-Site Scripting
High
CVE-2024-7432
Unseen Blog <= 1.0.0 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-47634
CartBounty – Save and recover abandoned carts for WooCommerce <= 8.2 - Cross-Site Request Forgery
Medium
CVE-2024-47348
YellowPencil Visual CSS Style Editor <= 7.6.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-47371
WP MyLinks <= 1.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Critical
CVE-2024-9108
Wechat Social login <= 1.3.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-47186
Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting
Low
CVE-2024-9283
ReLaXed Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.