High
CVE-2024-6123
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2024-5793
Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection
High
CVE-2024-6316
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2024-6317
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion
Medium
CVE-2024-5855
Media Hygiene <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion
Medium
CVE-2024-5600
Happy SCSS Compiler - Compile SCSS to CSS automatically <= 1.3.10 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-5946
Squelch Tabs and Accordions Shortcodes <= 0.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via tab Shortcode
High
CVE-2023-7061
Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-5285
WP Affiliate Platform <= 6.5.1 - Cross-Site Request Forgery to Afilliate Deletion
Medium
CVE-2024-5704
XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-5883
Ultimate Classified Listings <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-6167
Just Custom Fields <= 3.3.2 - Missing Authorization via AJAX actions
High
CVE-2024-5441
Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-5993
Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Authorized (Subscriber+) Chatbot Settings Update
Medium
CVE-2024-37559
Counterpoint <= 1.8.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-6487
Inline Related Posts <= 3.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-6161
Default Thumbnail Plus <= 1.0.2.3 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-6584
Jetpack Boost <= 3.4.6 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2024-3651
Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode
High
CVE-2024-40614
EGroupware mishandles an ORDER BY clause
High
CVE-2024-33862
OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability
Medium
CVE-2024-37545
Floating Social Media Links <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37554
UltraAddons Elementor Lite <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37556
WordPress Notification Bar <= 1.3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.