Medium
CVE-2024-0593
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2023-6821
Error Log Viewer <= 1.1.2 - Sensitive Information Exposure
High
CVE-2024-24309
Exposure of Sensitive Information to an Unauthorized Actor in Ecomiz - Survey TMA module for PrestaShop
High
CVE-2024-24310
Improper neutralization of SQL parameter in Ether Création - Generate barcode on invoice / delivery slip module for PrestaShop
Medium
CVE-2024-25981
Improper Access Control in moodle
Medium
CVE-2024-25983
Authorization Bypass in moodle
Medium
CVE-2024-25980
Improper Access Control in moodle
High
CVE-2024-25978
Uncontrolled Resource Consumption in moodle
Medium
CVE-2024-25979
Improper Handling of Parameters in moodle
High
CVE-2024-25982
Cross-Site Request Forgery in moodle
Medium
CVE-2024-26308
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
Medium
CVE-2024-25710
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
Medium
CVE-2024-26318
Cross-site Scripting in Serenity
Medium
CVE-2024-1510
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode
Medium
CVE-2024-1218
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization
High
CVE-2024-1290
Formidable Registration <= 2.11 - Authenticated (Contributor+) Arbitrary User Password Reset To Account Takeover
High
CVE-2024-0702
Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.1 - Missing Authorization
Medium
CVE-2024-1288
Schema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modification
Medium
CVE-2024-0656
Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-1586
Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting
Medium
CVE-2024-1496
Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url
High
CVE-2024-1217
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation
Medium
CVE-2024-1408
ProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via [edit-profile-text-box] shortcode
Medium
CVE-2024-1519
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.4 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.