Medium
CVE-2024-2091
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
Medium
CVE-2023-50374
CMP – Coming Soon & Maintenance <= 4.1.10 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2024-25420
Ignite Realtime Openfire privilege escalation vulnerability
High
CVE-2024-25421
Ignite Realtime Openfire privilege escalation vulnerability
Medium
CVE-2024-29203
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
Medium
CVE-2024-29881
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Medium
CVE-2024-29735
Apache Airflow Improper Preservation of Permissions vulnerability
Medium
CVE-2024-29644
dcat-admin Cross Site Scripting vulnerability
High
CVE-2024-30230
PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2024-2954
WordPress Action Network 1.4.3 -Authentcated (Admin+) SQL Injection
Medium
CVE-2024-30235
Multiple Page Generator Plugin – MPG <= 3.4.0 - Missing Authorization via mpg_get_log_by_project_id
High
CVE-2024-1983
Simple Ajax Chat <= 20240216 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-23500
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.19 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2024-1521
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload
Medium
CVE-2024-25599
Seriously Simple Podcasting <= 3.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-2093
VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure
Critical
CVE-2024-30239
Zoho Campaigns <= 2.0.6 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-2120
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation
Medium
CVE-2024-2203
The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget
Critical
CVE-2024-30224
WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) <= 1.3.2 - Unauthenticated PHP Object Injection
Medium
CVE-2024-29810
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'thumb_url'
Medium
CVE-2024-2117
Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget
High
CVE-2024-30231
Product Import Export for WooCommerce <= 2.4.1 - Authenticated(Shop Manager+) Arbitrary File Upload
Critical
CVE-2024-30245
DecaLog <= 3.9.0 - Authenticated (Admin+) SQL injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.