Medium
CVE-2024-10046
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2024-53908
Django SQL injection in HasKey(lhs, rhs) on Oracle
Medium
CVE-2024-53907
Django denial-of-service in django.utils.html.strip_tags()
Medium
CVE-2024-12026
Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) New Filter Creation
Medium
CVE-2024-12165
Mollie for Contact Form 7 <= 5.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11329
Comfino Payment Gateway <= 4.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12166
Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2024-12167
Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via _wpnonce
Medium
CVE-2024-11451
Zooom <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11353
SMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
Medium
CVE-2024-53457
LibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings section
Medium
CVE-2024-7894
If Menu <= 0.19.1 - Missing Authorization to License Key Update
Medium
CVE-2024-11605
WP Publications <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-54240
Blaze Online eParcel for WooCommerce <= 1.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-8679
Library Management System <= 3.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-11645
Float Block <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-12115
Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication
Critical
CVE-2024-54262
Import Export For WooCommerce <= 1.6.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-54246
FAQs <= 1.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-11644
WP-SVG <= 0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-12257
CardGate Payments for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting
High
CVE-2024-54261
TAX SERVICE Electronic HDM <= 1.1.2 - Unauthenticated SQL Injection
Medium
CVE-2024-11904
코드엠샵 소셜톡 <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54242
Simple Notification <= 1.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.