Medium
CVE-2024-29819
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
Medium
CVE-2024-29812
ReviewX <= 1.6.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29788
Podlove Web Player <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29764
Molongui <= 4.7.7 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-30201
WordPress Importer <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-29758
Co-marquage service-public.fr <= 0.5.72 - Reflected Cross-Site Scripting via search_term
Medium
CVE-2024-2732
Themify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30199
WP-Lister Lite for Amazon <= 2.6.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-29925
Post Grid, Slider & Carousel Ultimate <= 1.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29936
Image Hover Effects – Elementor Addon <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'eihe_align'
Medium
CVE-2024-29930
Crypto Converter Widget <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
High
CVE-2024-28850
WP Crontrol <= 1.16.1 - Remote Code Execution
Medium
CVE-2024-2583
Shortcodes Ultimate <= 7.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_color' Shortcode
High
CVE-2024-29190
SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
High
CVE-2023-5685
XNIO denial of service vulnerability
Medium
CVE-2024-29338
Cross-Site Request Forgery in Anchor CMS
High
CVE-2024-29499
Cross-Site Request Forgery in Anchor CMS
Medium
CVE-2024-29186
Slow String Operations via MultiPart Requests in Event-Driven Functions
Medium
CVE-2024-29042
Cache Poisoning Vulnerability
Medium
CVE-2024-28863
Denial of service while parsing a tar file due to lack of folders count validation
Medium
CVE-2024-28861
Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
High
CVE-2024-28119
Server Side Template Injection (SSTI) via Twig escape handler
High
CVE-2024-28118
Server Side Template Injection (SSTI)
High
CVE-2024-28117
Server Side Template Injection (SSTI)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.