Medium
CVE-2024-21641
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
High
CVE-2023-52323
PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption
Medium
CVE-2024-22075
Firefly III allows webhooks HTML Injection.
Medium
CVE-2023-6504
Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode
Medium
CVE-2023-52234
Booster Elite for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Medium
CVE-2023-6938
Oxygen Builder <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Medium
CVE-2023-52222
WooCommerce <= 8.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-52232
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Arbitrary Page/Post Deletion
Medium
CVE-2023-52230
Booster Plus for WooCommerce < 7.1.3 - Missing Authorization to Arbitrary Options Disclosure
High
CVE-2023-6751
Hostinger <= 1.9.7 - Missing Authorization to Maintenance Mode Activation
Medium
CVE-2024-21744
Mapster WP Maps <= 1.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-52225
Taggbox <= 3.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-6798
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing Authorization
Medium
CVE-2023-6990
Weaver Xtreme <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-21747
WP ERP <= 1.12.8 - Authenticated (Accounting manager+) SQL Injection
Medium
CVE-2023-7019
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder <= 2.6.8 - Missing Authorization
Medium
CVE-2023-6801
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-52211
WP Job Manager <= 2.0.0 - Missing Authorization
Medium
CVE-2023-52220
Google Analytics by Monster Insights <= 8.21.0 - Missing Authorization
Medium
CVE-2023-52212
WP Job Manager <= 2.0.0 - Cross-Site Request Forgery
High
CVE-2024-21743
Houzez Login Register <= 3.2.5 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Critical
CVE-2023-52218
WooCommerce Tranzila Gateway <= 1.0.8 - Unauthenticated PHP Object Injection
Medium
CVE-2023-52231
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Medium
CVE-2023-52199
ActivityPub <= 1.0.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.