High
CVE-2024-1249
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Medium
CVE-2023-6484
Keycloak vulnerable to log Injection during WebAuthn authentication or registration
High
CVE-2024-21409
.NET Elevation of Privilege Vulnerability
High
CVE-2024-30253
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
Medium
CVE-2024-29035
Blind SSRF Leads to Port Scan by using Webhooks
Medium
CVE-2023-6544
Keycloak Authorization Bypass vulnerability
Medium
CVE-2023-6717
Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flow
Medium
CVE-2023-3597
Keycloak secondary factor bypass in step-up authentication
High
CVE-2024-2419
Keycloak path traversal vulnerability in the redirect validation
Medium
CVE-2024-3825
BlazeMeter Jenkins plugin vulnerable to Cross-Site Request Forgery
High
CVE-2024-31503
Dolibarr vulnerable to Cross-Site Request Forgery
High
CVE-2024-3849
Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-2833
Jobs for WordPress <= 2.7.5 - Reflected Cross-Site Scripting via job-search
High
CVE-2024-3812
Salient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2024-1076
SSL Zen – Free Let's Encrypt SSL Certificate & HTTPS/SSL Redirect WordPress Plugin <= 4.5.0 - Sensitive Information Exposure
Medium
CVE-2023-6892
EAN for WooCommerce <= 4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta Shortcode
Medium
CVE-2024-32675
Order Limit for WooCommerce <= 2.0.0 - Missing Authorization
High
CVE-2024-3810
Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2024-32687
WPC Frequently Bought Together for WooCommerce <= 7.0.3 - Missing Authorization
Medium
CVE-2024-32689
WP Social Comments <= 1.7.3 - Missing Authorization via wpfc_allow_comments()
Medium
CVE-2024-32683
Wp Ultimate Review <= 2.2.5 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2024-32686
Backup Migration <= 1.4.3 - Information Exposure via Log Files
Medium
CVE-2024-1429
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget
Medium
CVE-2024-3811
Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.