Critical
CVE-2024-8353
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-9023
WP-WebAuthn <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wwa_login_form Shortcode
Medium
CVE-2024-8547
Simple Popup Plugin <= 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47345
Starter Templates <= 4.4.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-47343
Mega Elements <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8715
Simple LDAP Login <= 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9189
EU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization
Medium
CVE-2024-47340
Post Grid and Gutenberg Blocks <= 2.2.89 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47347
Chartify <= 2.7.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-8788
EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-47342
Accordion <= 2.2.99 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8712
GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting
Medium
CVE-2024-47341
WP-DownloadManager <= 1.68.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-8189
WP MultiTasking - WP Utilities <= 0.1.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-47339
WP Mail Catcher <= 2.1.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-47346
Newsletters <= 4.9.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-8991
OSM <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes
Low
CVE-2024-47171
Agnai vulnerable to Relative Path Traversal in Image Upload
Medium
CVE-2024-8681
Premium Addons for Elementor <= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget
Low
CVE-2024-47170
Agnai File Disclosure Vulnerability: JSON via Path Traversal
Critical
CVE-2024-47169
Agnai vulnerable to Remote Code Execution via JS Upload using Directory Traversal
Medium
CVE-2024-47075
Layui has DOM Clobbering gadgets that leads to Cross-site Scripting
Medium
CVE-2024-39319
IDOR vulnerability in account profile page
High
CVE-2024-9130
GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.