Medium
CVE-2024-43340
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2024-42681
Improper Preservation of Permissions in xxl-job
High
CVE-2024-43370
gettext.js has a Cross-site Scripting injection
High
CVE-2024-7301
WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-7630
Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure
Medium
CVE-2024-7501
Download Plugins and Themes from Dashboard <= 1.8.7 - Cross-Site Request Forgery
Medium
CVE-2024-7144
JetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7146
JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion
Medium
CVE-2024-7136
JetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-7049
Custom Field For WP Job Manager <= 1.2 - Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode
High
CVE-2024-7145
JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion
Medium
CVE-2022-3399
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.17.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6617
NinjaTeam Header Footer Custom Code < 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via CSS Styles
Medium
CVE-2024-6493
NinjaTeam Header Footer Custom Code < 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6665
KBucket: Your Curated Content in WordPress <= 4.1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-7147
JetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-7422
Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-42353
WebOb's location header normalization during redirect leads to open redirect
Medium
CVE-2024-7411
Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-43368
Trix has a cross-site Scripting vulnerability on copy & paste
High
CVE-2024-43372
Persistent Cross-site Scripting in eZ Platform Rich Text Field Type
High
CVE-2024-43369
Persistent Cross-site Scripting in Ibexa RichText Field Type
Medium
CVE-2024-43373
webcrack has an Arbitrary File Write Vulnerability on Windows when Parsing and Saving a Malicious Bundle
High
CVE-2024-7628
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.