Medium
CVE-2024-4377
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,583
Medium
CVE-2024-4969
Widget Bundle <= 2.0.0 - Cross-Site Request Forgery to Widget Disable/Enable
Medium
CVE-2024-5501
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4616
Widget Bundle <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-4475
WP Logs Book <= 1.0.1 - Cross-Site Request Forgery to Log Clearing
Medium
CVE-2024-4755
Google CSE <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4384
CSSable Countdown <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-6382
Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4474
WP Logs Book <= 1.0.1 - Cross-Site Request Forgery to Log Disabling
High
CVE-2024-4477
WP Logs Book <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-2295
Contact Form Manager <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3565
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode
Medium
CVE-2024-4382
CB (legacy) <= 0.9.4.18 - Cross-Site Request Forgery to Code/Timeframe/Booking Deletion
Medium
CVE-2024-5347
Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget
Medium
ghsa-pqfv-97hj-g97g
TYPO3 Frontend vulnerable to Unauthenticated Path Disclosure
Medium
ghsa-jqr8-q455-xx45
TYPO3 Brute Force Protection Bypass in backend login
Medium
ghsa-r287-hc8j-w56h
TYPO3 Information Disclosure Vulnerability Exploitable by Editors
Medium
ghsa-wp8j-c736-c5r3
TYPO3 Cross-Site Scripting Vulnerability Exploitable by Editors
High
ghsa-r9vc-jfmh-6j48
TYPO3 frontend login vulnerable to Session Fixation
High
ghsa-4r76-xr68-w7m7
TYPO3 may allow editors to change, create, or delete metadata of files not within their file mounts
High
ghsa-p84g-j2gh-83g3
TYPO3 possible cache poisoning on the homepage when anchors are used
Medium
CVE-2024-4160
Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode
Medium
ghsa-mxjf-hc9v-xgv2
ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting
Medium
CVE-2024-5520
OpenCMS Cross-Site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.