Medium
CVE-2024-54244
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-11842
DN Shipping by Weight for WooCommerce <= 1.1.1 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2024-54245
Clients <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-11943
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.2.2 - Reflected Cross-Site Scripting via add_query_arg Function
Medium
CVE-2024-54243
Echoza <= 0.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2024-54239
Eyewear prescription form <= 4.0.18 - Missing Authorization to Unauthenticated Arbitrary Options Update
Medium
CVE-2024-11921
GiveWP – Donation Plugin and Fundraising Platform <= 3.18.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11436
Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! <= 1.4.19 - Reflected Cross-Site Scripting
Medium
CVE-2024-54264
Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting
High
CVE-2024-52798
path-to-regexp contains a ReDoS
Medium
CVE-2024-54128
Directus has an HTML Injection in Comment
Low
CVE-2024-54140
sigstore-java has a vulnerability with bundle verification
High
CVE-2024-11460
Verowa Connect <= 3.0.1 - Unauthenticated SQL Injection
Medium
CVE-2024-10909
Pojo Forms <= 1.4.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via form_preview_shortcode
Medium
CVE-2024-11352
TwentyTwenty <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12027
Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Filter Updates/Deletions
Medium
CVE-2024-10879
ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-11823
Folder Gallery <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12028
Friends <= 3.2.1 - Missing Authorization
Medium
CVE-2024-11204
ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting via url Parameter
Medium
CVE-2024-12110
Gold Addons for Elementor <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) License Activation/Deactivation
Medium
CVE-2024-10320
Cookielay <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cookielay Shortcode
Medium
CVE-2024-11368
Splash Sync <= 2.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-12060
WP Media Optimizer (.webp) <= 1.4.0 - Reflected Cross-Site Scripting via wpmowebp-css-resources and wpmowebp-js-resources Parameters
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.