Medium
CVE-2024-3718
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,540
Critical
CVE-2024-25738
VuFind Server-Side Request Forgery (SSRF) vulnerability
Critical
CVE-2024-25737
VuFind Server-Side Request Forgery (SSRF) vulnerability
High
ghsa-3mm9-2p44-rw39
Silverstripe SiteTree Creation Permission Vulnerability
Medium
ghsa-r97r-64vp-fghm
Silverstripe XSS vulnerability via VirtualPage
Medium
CVE-2024-29392
Silverpeas Core vulnerable to Cross Site Scripting
High
CVE-2024-34448
Ghost allows CSV Injection during member CSV export
Medium
ghsa-6hh6-59j2-qrxw
Silverstripe History XSS Vulnerability
Low
ghsa-779c-7w4p-2c4g
Silverstripe admin XSS Vulnerability via WYSIWYG editor
Medium
CVE-2024-4043
WP Ultimate Post Grid <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-text Shortcode
Medium
CVE-2024-3711
Brizy – Page Builder <= 2.4.43 - Missing Authorization
Medium
CVE-2024-5177
Hash Elements <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter in Multiple Widgets
Medium
CVE-2024-3626
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization
Unrated
CVE-2024-13257
drupal/commerce_view_receipt - SA-CONTRIB-2024-021
Unrated
CVE-2024-13256
drupal/email_contact - SA-CONTRIB-2024-020
Medium
CVE-2024-4431
LA-Studio Element Kit for Elementor <= 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Medium
CVE-2024-4895
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.12 - Unauthenticated Stored Cross-Site Scripting via CSV Import
Medium
CVE-2024-3201
WP DSGVO Tools (GDPR) <= 3.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1855
WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery
Medium
CVE-2024-3065
PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4783
jQuery T(-) Countdown Widget <= 2.3.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via tminus Shortcode
Medium
CVE-2024-4486
Awesome Contact Form7 for Elementor <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via AEP Contact Form 7 Widget
Medium
CVE-2024-4378
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider
Critical
CVE-2024-5084
Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.