Medium
CVE-2024-3064
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-1289
LearnPress <= 4.2.6.3 - Insecure Direct Object Reference
High
CVE-2024-3217
WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
Low
CVE-2024-3180
Concrete CMS Stored XSS in blocks of type file
Low
CVE-2024-3181
Concrete CMS Stored XSS in the Search Field
Low
CVE-2024-3179
Concrete CMS Stored XSS in the Custom Class page editing
Low
CVE-2024-3178
Concrete CMS Cross-site Scripting (XSS) in the Advanced File Search Filter
Low
CVE-2024-2753
Concrete CMS Stored XSS on the calendar color settings screen
High
ghsa-w8gf-g2vq-j2f4
amphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames
High
CVE-2024-2653
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
Medium
CVE-2024-31207
Vite's `server.fs.deny` did not deny requests for patterns with directories.
Medium
CVE-2024-29477
Dolibarr ERP CRM Code Injection vulnerability during installation
Critical
CVE-2021-27312
Gleez Cms Server Side Request Forgery (SSRF) vulnerability
High
CVE-2024-2008
Modal Popup Box – Popup Builder, Show Offers And News in Popup <= 1.5.2 - Authenticated (Contributor+) PHP Object Injection in awl_modal_popup_box_shortcode
Critical
CVE-2024-31231
Rehub <= 19.6.1 - Unauthenticated Local File Inclusion
High
CVE-2024-31232
Rehub <= 19.6.1 - Authenticated (Editor+) Local File Inclusion
Medium
CVE-2023-6486
Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS
Medium
CVE-2024-2654
File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal
Medium
CVE-2024-1743
WooCommerce Customers Manager <= 29.7 - Reflected Cross-Site Scripting
High
CVE-2024-1792
CMB2 <= 2.10.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-3261
Strong Testimonials <= 3.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2919
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via CountUp Widget
High
CVE-2024-31233
Rehub <= 19.6.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-2803
ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.