Medium
CVE-2024-10663
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-10832
Posti Shipping <= 3.10.3 - Reflected Cross-Site Scripting
High
CVE-2024-10587
Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-11897
Contact Form, Survey & Form Builder – MightyForms <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-45106
Apache Ozone: Improper authentication when generating S3 secrets
Medium
CVE-2024-11903
WP eCards <= 1.3.904 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12099
Dollie Hub – Build Your Own WordPress Cloud Platform <= 6.2.0 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11880
B Testimonial – testimonial plugin for WP <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12096
Exhibit to WP Gallery <= 0.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-6978
WP Job Manager – Company Profiles <= 1.7 - Reflected Cross-Site Scripting
High
CVE-2024-11643
Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update
High
CVE-2024-11952
Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusion
Medium
CVE-2024-11769
Flower Delivery by Florist One <= 3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5020
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Critical
CVE-2024-43222
Sweet Date <= 3.7.3 - Unauthenticated Privilege Escalation
High
CVE-2024-11293
Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Social Sites Login <= 1.7.9 - Authentication Bypass via WordPress.com OAuth provider
Medium
CVE-2024-10664
Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update
Medium
CVE-2024-10787
LA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11466
Intro Tour Tutorial DeepPresentation <= 6.5.2 - Reflected Cross-Site Scripting
High
CVE-2024-10567
TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access
Medium
CVE-2024-53983
Backstage Scaffolder plugin vulnerable to Server-Side Request Forgery
Medium
CVE-2024-11326
Campaign Monitor Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-11325
AWeber Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting
High
CVE-2024-53900
Mongoose search injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.