Critical
CVE-2024-40624
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-39919
@jmondi/url-to-png enables capture screenshot of localhost web services (unauthenticated pages)
Medium
CVE-2024-39918
@jmondi/url-to-png contains a Path Traversal vulnerability
Medium
CVE-2024-4780
Image Hover Effects – Elementor Addon <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameter
Medium
CVE-2024-39912
The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames
Medium
CVE-2024-6557
SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure
High
CVE-2023-49566
Apache Linkis DataSource's JDBC Datasource Module with DB2 has JNDI Injection vulnerability
High
CVE-2023-41916
Apache Linkis DataSource allows arbitrary file reading
High
CVE-2023-46801
Apache Linkis DataSource remote code execution vulnerability
Critical
CVE-2024-21513
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' o
Medium
CVE-2024-3636
Pinpoint Booking System <= 2.9.9.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-6457
HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection
Medium
CVE-2024-6270
Community Events <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-1937
Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification
Medium
CVE-2024-3587
Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'
Medium
CVE-2024-6621
WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update
Medium
CVE-2024-2232
Himer - Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites
Medium
CVE-2024-6570
Glossary <= 2.2.26 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6498
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5852
WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-38767
BSK PDF Manager <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6710
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.44 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6720
Light Poll <= 1.0.0 - Cross-Site Request Forgery to Poll Answers Deletion
Medium
CVE-2024-5081
Wp EMember < 10.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.