High
CVE-2024-1710
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,426
Medium
CVE-2024-1810
Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-1071
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.1.3 - 2.8.2 - Unauthenticated SQL Injection
Medium
CVE-2024-26152
Summary
High
ghsa-rc4p-p3j9-6577
pypqc private key retrieval vulnerability
Medium
CVE-2023-44379
baserCMS Cross-site Scripting vulnerability in Site search Feature
Medium
CVE-2023-51450
baserCMS OS command injection vulnerability in Installer
Medium
CVE-2024-26128
baserCMS Cross-site Scripting vulnerability in Content Management
Critical
ghsa-97m3-52wr-xvv2
Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE
Medium
CVE-2024-25876
Enhavo Cross-site Scripting vulnerability
Medium
CVE-2024-25874
Enhavo Cross-site Scripting vulnerability
Medium
CVE-2024-25875
Enhavo Cross-site Scripting vulnerability
Medium
ghsa-gj48-w74w-8gvm
Path Traversal in TYPO3 Core
Medium
CVE-2024-1590
Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
Medium
CVE-2024-0827
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Cross-Site Request Forgery
Medium
CVE-2024-1360
Colibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin Installation
Medium
CVE-2024-1778
Admin side data storage for Contact Form 7 <= 1.1.1 - Missing Authorization to Unauthenticated Bookmark Status Alteration
Medium
CVE-2024-1777
Admin side data storage for Contact Form 7 <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2024-1362
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh
High
CVE-2024-0203
Digits <= 8.4.1 - Cross-Site Request Forgery to Privilege Escalation
High
CVE-2024-1772
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-1776
Admin side data storage for Contact Form 7 <= 1.1.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-1380
Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export
Medium
CVE-2024-0828
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.