Medium
CVE-2024-4570
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-4569
Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37249
Advanced Custom Fields PRO < 6.3.2 - Missing Authorization
High
CVE-2024-6054
Auto Featured Image <= 1.2 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-37251
Advanced Custom Fields Pro <= 6.3.1 - Cross-Site Request Forgery
Low
CVE-2024-37253
WP Directory Kit <= 1.3.6 - Authenticated (Admin+) HTML Injection
Medium
CVE-2024-37250
Advanced Custom Fields Pro <= 6.3.1 - Missing Authorization
Critical
CVE-2024-37843
Craft CMS SQL injection vulnerability via the GraphQL API endpoint
Medium
CVE-2024-5215
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
High
CVE-2024-38516
Aimeos HTML client may potentially reveal sensitive information in error log
Low
CVE-2024-38364
DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document
Medium
CVE-2024-5173
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings
High
CVE-2024-4869
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header
Medium
CVE-2024-5332
Exclusive Addons for Elementor <= 2.6.9.8 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget
Medium
CVE-2024-37245
All In One Redirection <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-37248
Anima <= <=1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37246
Gallery Slideshow <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
379a5016-3968-4b28-8d6e-0f517e419016
Various Plugins <= Various Version - Use of Polyfill.io
Medium
CVE-2024-5451
The7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
High
CVE-2024-38374
Improper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-java
Critical
CVE-2024-6028
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
Medium
CVE-2023-49793
CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Critical
CVE-2024-38369
XWiki programming rights may be inherited by inclusion
High
CVE-2024-5431
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.