Medium
CVE-2024-32872
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
ghsa-vjwg-28gv-pm8h
Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881
Unrated
CVE-2024-13254
drupal/rest_views - SA-CONTRIB-2024-018
Unrated
CVE-2024-13253
drupal/advanced_pwa - SA-CONTRIB-2024-017
Medium
CVE-2024-3823
Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-4086
CM Tooltip Glossary – Powerful Glossary Plugin <= 4.2.11 - Cross-Site Request Forgery
Medium
CVE-2024-3897
Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure
Medium
CVE-2024-3893
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion
Medium
CVE-2024-3747
Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block
Medium
CVE-2024-3607
PropertyHive <= 2.0.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
CVE-2024-3405
WP Prayer <= 2.0.9 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-3681
Interactive World Maps <= 2.4.14 - Reflected Cross-Site Scripting
Medium
CVE-2024-3824
Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Request Forgery to Setting Reset
Medium
CVE-2024-3406
WP Prayer <= 2.0.9 - Cross-Site Request Forgery to Email Settings Update
Medium
CVE-2024-3631
HL Twitter <= 2014.1.18 - Cross-Site Request Forgery to Twitter Account Unlink
Medium
CVE-2024-33627
Absolutely Glamorous Custom Admin <= 7.2.3 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2024-3634
month name translation benaceur <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3988
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sina Fancy Text Widget
Medium
CVE-2024-3548
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox
Medium
CVE-2024-3730
Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-3749
SP Project & Document Manager <= 4.71 - Insecure Direct Object Reference to Information Exposure
Medium
CVE-2024-3929
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Post Overlay
Medium
CVE-2024-3734
FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-3647
Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.