Medium
CVE-2024-53816
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-54208
Block Controller <= 1.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-54205
Paloma Widget <= 1.14 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-53824
All Bootstrap Blocks <= 1.3.19 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-53798
FloristPress <= 7.3.0 - Missing Authorization to Arbitrary Content Deletion
Medium
CVE-2024-53809
Namaste! LMS <= 2.6.4.1 - Cross-Site Request Forgery
Medium
CVE-2024-53812
WP GeoNames <= 1.8 - Reflected Cross-Site Scripting
High
CVE-2024-54216
ARForms <= 6.4.1 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2024-53799
FloristPress <= 7.3.0 - Missing Authorization to Sensitive Data Exposure
Critical
CVE-2024-53822
Pie Register Premium < 3.8.3.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-24566
Intro Tour Tutorial DeepPresentation <= 6.5.2 - Reflected Cross-Site Scripting
High
CVE-2024-35371
Ant-Media-Server vulnerable to Improper Output Neutralization for Logs
Medium
CVE-2024-11252
Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter
Medium
CVE-2024-10706
Download Manager <= 3.3.02 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-53792
Watu Quiz <= 3.4.1.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-53793
eDoc Easy Tables <= 1.29 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2024-11108
Serious Slider <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-8968
WordPress Button Plugin MaxButtons <= 9.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Text Color
High
CVE-2024-53790
Lenxel Core <= 1.2.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-53791
Lenxel Core <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10555
WordPress Button Plugin MaxButtons <= 9.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Button Width
Medium
CVE-2024-11607
GTPayment Donations <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Unrated
CVE-2024-52338
Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it
Medium
CVE-2024-53757
WP Find Your Nearest <= 0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.