Medium
CVE-2023-36259
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2024-21488
network Arbitrary Command Injection vulnerability
High
CVE-2023-51982
CrateDB authentication bypass vulnerability
Critical
CVE-2023-51837
Ylianst MeshCentral Missing SSL Certificate Validation
Critical
CVE-2024-22682
DuckDB <=0.9.2 and DuckDB extension-template <=0.9.2 are vulnerable to malicious extension injection via the custom extension feature.
Medium
CVE-2024-23519
Email Before Download <= 6.9.7 - Cross-Site Request Forgery
Medium
CVE-2024-23518
ACF Photo Gallery Field <= 2.6 - Missing Authorization in apgf_update_donation
Medium
CVE-2024-23516
CC BMI Calculator <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-23511
The Plus Addons for Elementor <= 5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-23513
PropertyHive <= 2.0.5 - Unauthenticated PHP Object Injection via propertyhive_currency
Medium
CVE-2024-23510
Don't Muck My Markup <= 1.8 - Cross-Site Request Forgery
Medium
CVE-2024-0366
Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference
Medium
CVE-2024-0836
WordPress Review & Structure Data Schema Plugin – Review Schema <= 2.1.14 - Missing Authorization to Arbitrary Review Update
Medium
ab2a4903-2c69-48da-bd4a-79b39b78806c
Custom Order Status for WooCommerce <= 2.3.0 - Cross-Site Request Forgery
Medium
CVE-2024-23520
PopupAlly <= 2.1.0 - Cross-Site Request Forgery via optin_submit_callback
Medium
CVE-2024-23514
Click To Tweet <= 2.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-23517
Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0790
WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Cross-Site Request Forgery
Medium
CVE-2023-7202
Fatal Error Notify <= 1.5.2 - Missing Authorization to Test Error Email Sending
Medium
4fc76e1c-546f-4ecd-bd3b-a6f21b2c65bf
BizPrint <= 4.5.1 - Missing Authorization in showTemplatePreview
Medium
487a131e-4911-42d6-bfd7-fc697c89552d
BizPrint <= 4.5.1 - Cross-Site Request Forgery in Printer Management
Critical
CVE-2024-23512
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks <= 3.1.4 - PHP Object Injection via wopb_wishlist and wopb_compare
Medium
CVE-2024-0859
Affiliates Manager <= 2.9.34 - Cross-Site Request Forgery
Medium
CVE-2023-7167
Persian Fonts <= 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.