High
CVE-2024-24844
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-24837
FG Drupal to WordPress <= 3.67.0 - Cross-Site Request Forgery via ajax_importer
Medium
CVE-2024-1209
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
Medium
CVE-2024-1210
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
Medium
CVE-2024-24849
Quicksand Post Filter jQuery Plugin <= 3.1.1 - Cross-Site Request Forgery via renderAdmin
Medium
CVE-2024-24846
Mighty Addons for Elementor <= 1.9.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-24842
Knowledge Base for Documentation, FAQs with AI Assistance <= 11.30.2 - Unauthenticated PHP Object Injection in is_article_recently_viewed
Medium
CVE-2024-24835
BEAR <= 1.1.4 - Missing Authorization via Several Functions
Medium
CVE-2024-24805
WP Dummy Content Generator <= 3.1.2 - Missing Authorization
Medium
CVE-2024-24834
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
Medium
CVE-2024-24838
Five Star Restaurant Reviews <= 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Review URL
Medium
CVE-2023-7203
Smart Forms <= 2.6.86 - Missing Authorization
Medium
CVE-2024-0659
Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options
Medium
CVE-2024-24833
Happy Addons for Elementor <= 3.10.1 - Missing Authorization via add_row_actions
Medium
CVE-2024-24832
EventPrime <= 3.3.9 - Improper Input Validation via save_event_booking
Medium
CVE-2024-24840
Element Pack Elementor Addons <= 5.4.11 - Missing Authorization via bdt_duplicate_as_draft
High
CVE-2024-24869
Total Upkeep <= 1.15.8 - Improper Authorization to Unauthenticated Arbitrary File Download
Medium
CVE-2024-24847
CalculatorPro Calculators <= 1.1.7 - Reflected Cross-Site Scripting via CP_preview_calc
Low
CVE-2024-24754
Bref vulnerable to Body Parsing Inconsistency in Event-Driven Functions
Medium
CVE-2024-24753
Bref Doesn't Support Multiple Value Headers in ApiGatewayFormatV2
Medium
CVE-2024-24752
Bref's Uploaded Files Not Deleted in Event-Driven Functions
High
CVE-2024-24570
Statmic CMS vulnerable to account takeover via XSS and password reset link
Critical
CVE-2024-24561
Vyper's bounds check on built-in `slice()` function can be overflowed
Medium
CVE-2024-0969
ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.