Medium
CVE-2024-6573
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-6661
ParityPress <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-6152
Flipbox Builder <= 1.5 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-6548
Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure
Medium
CVE-2024-6547
Add Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosure
Medium
CVE-2023-49921
Elasticsearch Insertion of Sensitive Information into Log File
Medium
CVE-2024-6634
Master Currency WP <= 1.1.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via Currency Converter Form Shortcode
Medium
CVE-2024-6458
WooCommerce Product Table Lite <= 3.5.1 - Missing Authorization to (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-6569
Campaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path Disclosure
Critical
CVE-2024-6460
Grow by Tradedoubler <= 2.0.21 - Unauthenticated Local File Inclusion
Medium
CVE-2024-6703
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields
High
CVE-2024-6431
Media.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-5614
Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1804
Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_import_from_xml
Medium
CVE-2024-4410
IgnitionDeck Crowdfunding Platform <= 1.9.8 - Missing Authorization
Medium
CVE-2024-41800
Craft CMS Allows TOTP Token To Stay Valid After Use
High
CVE-2024-41667
OpenAM FreeMarker template injection
Critical
CVE-2024-37084
Remote code execution in Spring Cloud Data Flow
Medium
CVE-2024-41670
Improperly Implemented Security Check for Standard in PayPal Official for PrestaShop
High
CVE-2024-40137
Dolibarr ERP CRM vulnerable to remote code execution (RCE)
High
CVE-2024-41672
sniff_csv provides filesystem access even when enable_external_access is disabled in duckdb
High
CVE-2024-39676
Apache Pinot: Unauthorized endpoint exposed sensitive information
High
CVE-2023-48362
XML External Entity Reference (XXE) in the XML Format Plugin in Apache Drill
Medium
CVE-2024-3896
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Title
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.