Medium
CVE-2024-22136
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
Medium
CVE-2023-6594
WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-25093
GD Rating System <= 3.5.0 - Unauthenticated Stored Cross-Site Scripting via IP
Medium
CVE-2024-22134
Contact Form 7 Extension For Mailchimp <= 0.5.70 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2023-52229
Word Replacer Pro <= 1.0 - Missing Authorization
Critical
CVE-2023-52215
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated SQL Injection via userToken
Medium
CVE-2024-22138
Seraphinite Accelerator <= 2.20.47 - Unauthenticated Sensitive Information Exposure via Log File
Medium
CVE-2023-52223
MailerLite – WooCommerce integration <= 2.0.8 - Cross-Site Request Forgery via Multiple AJAX Functions
Medium
CVE-2023-52226
Advanced Flamingo <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2024-21751
RabbitLoader <= 2.19.13 - Missing Authorization via multiple AJAX actions
Medium
872f13bc-e6d0-4307-b2c9-b55a44df1016
LiveChat WooCommerce <= 2.2.16 - Cross-Site Request Forgery
Medium
CVE-2023-52227
MailerLite – WooCommerce integration <= 2.0.8 - Missing Authorization via Multiple Functions
Medium
CVE-2023-52228
Beds24 Online Booking <= 2.0.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-52224
Revolut Gateway for WooCommerce <= 4.9.7 - Missing Authorization
Medium
CVE-2023-6842
Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6742
Envira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images
Medium
3e4aaf2e-a0c6-47d2-9eb8-d65952a74424
OneClick Chat to Order <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-52221
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated Arbitrary File Upload via uploadFile
Medium
32c2a25d-e660-4700-8df3-b043cf6aa78a
LiveChat Elementor <= 1.0.13 - Cross-Site Request Forgery
Medium
CVE-2023-6788
Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery
Medium
1b9ed184-814d-46cb-979c-908bc9359fae
Swift SMTP <= 5.0.6 - Cross-Site Request Forgery
High
CVE-2024-30501
Download Monitor <= 4.9.4 - Authenticated (Admin+) SQL Injection
High
CVE-2023-51441
Apache Axis Improper Input Validation vulnerability
Medium
CVE-2024-21641
Flarum's logout Route allows open redirects
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.