Medium
CVE-2024-5073
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Medium
CVE-2024-5341
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget
Unrated
CVE-2024-13260
drupal/migrate_queue_importer - SA-CONTRIB-2024-024
Unrated
CVE-2024-13259
drupal/image_sizes - SA-CONTRIB-2024-023
Unrated
CVE-2024-13258
drupal/rest_api_authentication - SA-CONTRIB-2024-022
Medium
CVE-2024-3943
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment
Medium
CVE-2024-3945
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()
Medium
CVE-2024-3947
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings
Medium
CVE-2024-3946
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings
Medium
CVE-2024-4218
AffiEasy <= 1.1.6 - Cross-Site Request Forgery to Various Actions
Medium
CVE-2024-4356
List categories <= 0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-3277
Yumpu ePaper publishing <= 2.0.24 - Missing Authorization to PDF Upload, Publishing, and API Key Modification
Medium
CVE-2024-3063
WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3190
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field
Medium
CVE-2024-3269
Download Monitor <= 4.9.13 - Missing Authorization
Medium
CVE-2024-5223
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-37294
Aimeos denial of service vulnerability in SaaS and marketplace setups
Medium
CVE-2024-3726
Login Logout Register Menu <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'llrmloginlogout' Shortcode
Critical
ghsa-4qpj-gxxg-jqg4
Swiftmailer Sendmail transport arbitrary shell execution
Medium
ghsa-q8fc-v85f-78pw
stormpath/sdk uses Insecure Random Number Generator
Medium
ghsa-g6f5-4w43-2x63
ScnSocialAuth Cross-site Scripting vulnerability in login redirect param
Medium
CVE-2024-2253
Testimonial Carousel For Elementor <= 10.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5327
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
High
CVE-2024-5326
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.