Medium
CVE-2024-1843
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2024-2278
Themify – WooCommerce Product Filter <= 1.4.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-28754
raspap-webgui vulnerable to denial of service
Medium
CVE-2024-1767
Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2123
Ultimate Member <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1125
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
CVE-2024-1363
Easy Accordion – Best Accordion FAQ Plugin for WordPress <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1320
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1321
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass
Medium
CVE-2024-1123
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post Overwrite
Medium
CVE-2024-1124
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Medium
CVE-2024-1870
Colibri Page Builder <= 1.0.260 - Missing Authorization
Medium
CVE-2024-1176
HT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email Update
Critical
CVE-2024-2044
pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user
Medium
CVE-2024-28176
jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
Critical
CVE-2024-28213
nGrinder vulnerable to unsafe Java objects deserialization
Medium
CVE-2024-2000
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget
Medium
CVE-2024-2252
Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1851
affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list
Medium
CVE-2024-0673
Pz-LinkCard <= 2.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-1986
Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-0672
Pz-LinkCard <= 2.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-2127
Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Medium
CVE-2024-2238
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.