Medium
CVE-2024-12595
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-54411
WP Controller <= 3.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54440
WP-Ban-User <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-12042
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)
Medium
CVE-2024-54386
Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart <= 3.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54359
Banner System <= 1.0.0 - Missing Authorization
Medium
CVE-2024-54404
MDC Comment Toolbar <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54354
Termin-Kalender <= 0.99.47 - Missing Authorization to Authenticated (Subscriber+)
Medium
CVE-2024-54394
Mandrill WP <= 1.0.5 - Cross-Site Request Forgery
Medium
CVE-2019-25221
Responsive Filterable Portfolio <=1.0.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-54433
Simple Booking Widget <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-10783
MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation
Medium
CVE-2024-54432
WP Flipkart Importer <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54424
Like in Vk.com <= 0.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54434
phZoom <= 1.2.92 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12572
Hello in All Languages <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54413
Display Future Posts <= 0.2.3 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-12579
Minify HTML <= 2.1.10 - - Regular Expressions Denial of Service
Medium
CVE-2024-54407
CK and SyntaxHighlighter <= 3.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2024-9290
Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-54388
Multiple Admin Emails <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-54431
Admin Customization <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-54438
Gaxx Keywords <= 0.2 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-12421
Coupon Affiliates – Affiliate Plugin for WooCommerce <= 5.16.7.1 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.