Medium
CVE-2024-43977
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-43980
Fota WP <= 1.4.1 - Missing Authorization via fotawp_install_and_activate_plugins()
Critical
CVE-2024-43978
Super Store Finder <= 6.9.7 - Unauthenticated SQL Injection
Medium
CVE-2024-43999
Ninja Forms <= 3.8.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-2440
Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization
High
CVE-2024-43982
Login As Users <= 1.4.3 - Missing Authorization to Privielge Escalation via Account Takeover
Medium
CVE-2024-43971
Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-43983
Podlove Podcast Publisher <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43973
GetPaid <= 2.8.11 - Missing Authorization via column_subscription()
Medium
CVE-2024-43979
Blockbooster <= 1.0.10 - Missing Authorization
Medium
CVE-2024-5857
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion
High
CVE-2024-43975
Super Store Finder <= 6.9.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-43970
SureCart <= 2.29.3 - Reflected Cross-Site Scripting
High
CVE-2024-7856
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2024-6551
GiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure
Critical
CVE-2024-43976
Super Store Finder <= 6.9.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-43984
Podlove Podcast Publisher <= 4.1.13 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2024-43969
Spiffy Calendar <= 4.9.12 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-43974
ReviveNews <= 1.0.2 - Missing Authorization via revivenews_install_and_activate_plugins()
Medium
CVE-2024-43972
PageLayer <= 1.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-7606
Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-6534
Directus has an insecure object reference via PATH presets
Medium
CVE-2024-45037
AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
High
ghsa-pp84-v3mw-gg4w
Taipy 3.1.1 affected by CVEs on flask-core and pymongo
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.