Critical
CVE-2024-25925
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-1425
EmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link
Medium
CVE-2024-1127
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export
Medium
CVE-2024-25922
Peach Payments Gateway <= 3.1.9 - Missing Authorization via peach_core_version_rollback()
High
CVE-2024-25918
InstaWP Connect <= 0.1.0.8 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2024-0326
Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via onClick Events
High
CVE-2024-24707
Cwicly <= 1.4.0.2 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2024-1447
Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1242
Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-0057
NuGet Client Security Feature Bypass Vulnerability
High
CVE-2024-22188
TYPO3 Install Tool vulnerable to Code Execution
High
CVE-2024-21386
Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability
Medium
CVE-2023-30451
Path Traversal in TYPO3 File Abstraction Layer Storages
High
CVE-2024-25121
TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler
Medium
CVE-2024-25120
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme
Medium
CVE-2024-25119
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key
Medium
CVE-2024-24751
derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module
Medium
CVE-2024-25118
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords
Medium
CVE-2024-1163
mapshaper Path Traversal vulnerability
Medium
CVE-2024-0838
Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0561
Ultimate Posts Widget <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1389
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return
Critical
CVE-2024-25600
Bricks <= 1.9.6 - Unauthenticated Remote Code Execution
Medium
CVE-2024-1273
Starbox <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.