Medium
CVE-2024-0379
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Low
CVE-2024-0628
WP RSS Aggregator <= 4.23.5 - Authenticated (Admin+) Server-Side Request Forgery via RSS Feed Source
Medium
CVE-2023-6806
Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings
Medium
CVE-2024-1055
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0977
Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-24304
Exposure of Sensitive Information to an Unauthorized Actor in Mailjet module for PrestaShop
High
CVE-2024-24311
Improper Limitation of a Pathname to a Restricted Directory in Linea Grafica - Multilingual and Multistore Sitemap Pro – SEO module for PrestaShop
Critical
CVE-2024-24303
Improper neutralization of SQL parameter in HiPresta - Gift Wrapping Pro module for PrestaShop
Critical
CVE-2023-46914
Improper neutralization of SQL parameter in RM RM - Booking Calendar module for PrestaShop
High
CVE-2024-22567
mingSoft MCMS File Upload vulnerability
Medium
CVE-2024-24396
Stimulsoft Dashboard.JS Cross Site Scripting vulnerability
Low
CVE-2024-24559
Vyper sha3 codegen bug
Low
CVE-2024-24807
Sulu HTML Injection via Autocomplete Suggestion
Medium
CVE-2024-24574
phpMyFAQ vulnerable to stored XSS on attachments filename
Medium
CVE-2024-22208
phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes
Medium
CVE-2024-22202
phpMyFAQ User Removal Page Allows Spoofing Of User Details
Medium
CVE-2024-24397
Stimulsoft Dashboard.JS Cross Site Scripting vulnerability
High
CVE-2024-24762
python-multipart vulnerable to Content-Type Header ReDoS
Medium
CVE-2024-24874
CP Polls <= 1.0.71 - Unauthenticated Content Injection
Medium
CVE-2024-24871
Blocksy <= 2.0.19 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-24887
Contest Gallery <= 21.2.8.4 - Cross-Site Request Forgery
Medium
CVE-2024-24884
Contact Form 7 Connector <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2024-24878
Portugal CTT Tracking for WooCommerce <= 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-24879
Link Library <= 7.5.13 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.