Critical
CVE-2024-6220
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-5703
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization
Medium
CVE-2024-5582
Schema & Structured Data for WP & AMP <= 1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Medium
CVE-2024-5254
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-6669
AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5255
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5252
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5253
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5251
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2024-39700
JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option include `update-integration-tests.yml` workflow which has a
High
CVE-2024-6660
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload
Medium
CVE-2024-39887
Apache Superset vulnerable to improper SQL authorization
Medium
CVE-2024-3973
House Manager – Easy Renter Management System for WordPress <= 1.0.8.4 - Reflected Cross-Site Scripting
High
CVE-2024-6467
BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
Medium
CVE-2024-6766
Shortcodes Ultimate Pro <= 7.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-6651
WordPress File Upload <= 4.24.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-7084
Ajax Search Lite < 4.12 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-38768
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) <= 2.0.8.6 - Authenticated (contributor+) Local File Inclusion
Medium
CVE-2024-7082
Easy Table of Contents <= 2.0.67.1 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2024-6494
WordPress File Upload <= 4.24.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-6033
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import
Medium
CVE-2024-6579
Web and WooCommerce Addons for WPBakery Builder <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification
Medium
CVE-2024-6565
AForms <= 2.2.6 - Unauthenticated Full Path Disclosure
High
CVE-2024-40631
Plate media plugins has a XSS in media embed element when using custom URL parsers
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.