High
CVE-2024-27181
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2024-27182
Apache Linkis arbitrary file deletion vulnerability
High
CVE-2024-36268
Apache Inlong Code Injection vulnerability
Low
CVE-2024-42461
Elliptic allows BER-encoded signatures
Low
CVE-2024-42460
Elliptic's ECDSA missing check for whether leading bit of r and s is zero
Low
CVE-2024-42459
Elliptic's EDDSA missing signature length check
Medium
CVE-2024-41962
Bostr Improper Authorization vulnerability
Medium
CVE-2024-3282
WP Table Builder <= 1.5.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8619
Ajax Search Lite <= 4.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-7031
File Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Update
Medium
CVE-2024-6872
Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor & Gutenberg Blocks! – TemplateSpare <= 2.4.2 - Missing Authorization to Authenticated (Subscriber+) Theme Update
Medium
CVE-2024-6715
Ditty 3.1.39 - 3.1.45 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-6709
Sync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update
High
CVE-2024-7291
JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalation
Medium
CVE-2024-4353
Concrete CMS vulnerable to Stored Cross-site Scripting
Medium
CVE-2024-4643
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-3238
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.29 - Cross-Site Request Forgery to Arbitrary File Deletion
Medium
CVE-2024-3827
Spectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDs
Medium
CVE-2024-6567
Ebook Store <= 5.8001 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6704
Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection
Medium
CVE-2024-39649
Essential Addons for Elementor <= 5.9.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-39658
Salon booking system <= 10.7 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-38693
WP User Frontend <= 4.0.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-39665
Filter & Grids <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.