Medium
CVE-2024-4667
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-39699
Directus Blind SSRF On File Import
Medium
ghsa-564j-v29w-rqr6
Khoj Open Redirect Vulnerability in Login Page
Low
ghsa-3v33-3wmw-3785
yt-dlp has dependency on potentially malicious third-party code in Douyu extractors
High
CVE-2024-39677
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
Medium
CVE-2024-37389
Apache NiFi vulnerable to Cross-site Scripting
Medium
CVE-2024-6169
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'
Medium
CVE-2024-6366
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.7 - Missing Authorization to Unauthenticated Media Upload
High
CVE-2024-6320
ScrollTo Top <= 1.2.2 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-6170
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'
High
CVE-2024-6321
ScrollTo Bottom <= 1.1.1 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2024-6310
Advanced AJAX Page Loader <= 2.7.7 - Cross-Site Request Forgery to Arbitrary File Upload
Critical
CVE-2024-6314
IQ Testimonials <= 2.2.7 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-6365
Product Table by WBW <= 2.0.1 - Unauthenticated Remote Code Execution
Critical
CVE-2024-6313
Gutenberg Forms <= 2.2.9 - Unauthenticated Arbitrary File Upload
High
CVE-2024-5792
Houzez CRM <= 1.4.2 - Authenticated (Seller+) SQL Injection
Medium
CVE-2024-6168
Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery via AJAX actions
High
CVE-2024-6166
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection
Medium
CVE-2024-5882
Ultimate Classified Listings <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2023-7062
Advanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-3228
Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure
High
CVE-2024-6309
Attachment File Icons (AF Icons) <= 1.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-4483
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6171
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.