Medium
CVE-2024-0506
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-0620
PPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism Bypass
Medium
CVE-2024-0513
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist
Medium
CVE-2024-1091
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Plugin Data Removal in reinitialize
Medium
CVE-2023-6923
Matomo <= 4.15.3 - Reflected Cross-Site Scripting via idsite
Medium
CVE-2024-1339
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Plugin Data Removal in reinitialize
Medium
CVE-2024-0983
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in enableOptimization
Medium
CVE-2024-0792
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-1334
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in enableOptimization
High
CVE-2024-24680
Django denial-of-service attack in the intcomma template filter
Medium
CVE-2024-0690
An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. It was discovered that information is still included in the out
High
CVE-2024-23673
Apache Sling Servlets Resolver executes malicious code via path traversal
Critical
CVE-2024-0964
A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.
Critical
CVE-2024-24398
Stimulsoft Dashboard.JS directory traversal vulnerability
Medium
CVE-2023-34042
Spring Security's spring-security.xsd file is world writable
Medium
CVE-2024-1043
AMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data
High
CVE-2024-1118
Podlove Subscribe button <= 1.3.10 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-1037
All-In-One Security (AIOS) – Security and Firewall <= 5.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-1109
Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export
Medium
CVE-2024-1078
Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification
Medium
CVE-2024-1079
Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval
Medium
CVE-2022-41990
3D Tag Cloud <= 3.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-1044
Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review
Medium
CVE-2024-1110
Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.