Low
CVE-2024-12300
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2024-12397
io.quarkus.http/quarkus-http-core: Quarkus HTTP Cookie Smuggling
High
CVE-2024-45404
OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious
Medium
CVE-2024-54403
Visual Recent Posts <= 1.2.3 - Reflected Cross-Site Scripting
High
CVE-2024-54361
Instant Appointment <= 1.2 - Unauthenticated SQL Injection
Medium
CVE-2024-54418
DTC Documents <= 1.1.05 - Cross-Site Request Forgery
Medium
CVE-2024-12465
Property Hive Stamp Duty Calculator <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54358
3D Avatar User Profile <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-54429
Aphorismus <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-54385
Radio Player <= 2.0.83 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-54423
Social Media Sharing <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54422
Evernote Sync <= 3.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-54437
jCarousel <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-9608
MyParcel <= 4.24.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-11275
WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion
Medium
CVE-2024-54400
AppMaps <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54435
Onlywire Multi Autosubmitter <= 1.2.4 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-12309
Rate My Post – Star Rating Plugin by FeedbackWP <= 4.2.4 - Unauthenticated Voting On Scheduled Posts
Medium
CVE-2024-54389
addWeather <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54427
Category of Posts <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54417
PixProof <= 2.0.1 - Missing Authorization
Medium
CVE-2024-54419
Ui Slider Filter By Price <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2024-54421
Floating Video Player <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54401
Advanced Fancybox <= 1.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.