Critical
CVE-2024-45201
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-5502
Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Low
CVE-2024-43787
Hono CSRF middleware can be bypassed using crafted Content-Type header
High
CVE-2024-7258
WooCommerce Google Feed Manager <= 2.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Deletion
High
CVE-2024-7559
File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-7766
Adicon Server <= 1.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-3163
Easy Property Listings <= 3.5.3 - Cross-Site Request Forgery
Medium
CVE-2024-7816
Gixaw Chat <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-7820
ILC Thickbox <= 1.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-7861
Misiek Paypal <= 1.1.20090324 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-6723
AI Engine <= 2.4.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-7822
Quick Code <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-7860
Simple Headline Rotator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-8056
MM-Breaking News <= 0.7.9 - Reflected Cross-Site Scripting
Critical
CVE-2024-43918
WBW Product Table Pro <= 1.9.4 - Unauthenticated Arbitrary SQL Execution
Medium
CVE-2024-7818
Misiek Photo Album <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-7817
Misiek Photo Album <= 1.4.3 - Cross-Site Request Forgery to Album Deletion
Medium
CVE-2024-6887
Giveaways and Contests by RafflePress <= 1.12.16 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-8054
MM-Breaking News <= 0.7.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2024-43917
TI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection
Medium
CVE-2024-6018
Music Request Manager <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-7859
Visual Sound <= 1.03 - Cross-Site Request Forgery to Settings Update
High
CVE-2024-6019
Music Request Manager <= 1.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-7862
Blog Introduction <= 0.3.0 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.