Medium
CVE-2024-52483
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-10520
WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion
Medium
CVE-2024-10891
Save as PDF Plugin by Pdfcrowd <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11277
404 Solution <= 2.35.19 - Reflected Cross-Site Scripting
High
CVE-2024-11107
System Dashboard <= 2.8.14 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-52482
Ortto <= 1.0.19 - Reflected Cross-Site Scripting
High
CVE-2024-10913
Clone <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace'
Medium
CVE-2024-51900
What Would Seth Godin Do <= 2.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-9653
Restaurant Menu – Food Ordering System – Table Reservation <= 2.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-11224
Parallax Image <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via position Parameter
Medium
CVE-2024-9777
Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameter
Medium
CVE-2024-9830
Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameter
High
CVE-2024-11038
WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form
High
CVE-2024-11036
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings
Medium
CVE-2024-11195
Email Subscription Popup <= 1.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcode
High
CVE-2024-52506
Graylog concurrent PDF report rendering can leak other users' reports
High
CVE-2024-48917
XXE in PHPSpreadsheet's XLSX reader
High
CVE-2024-47873
XmlScanner bypass leads to XXE
Critical
CVE-2024-47533
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Medium
CVE-2024-10268
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
Medium
CVE-2024-11098
SVG Block <= 1.1.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-52318
Apache Tomcat - XSS in generated JSPs
Medium
CVE-2024-37155
OpenCTI May Bypass Introspection Restriction
Critical
CVE-2024-52316
Apache Tomcat - Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.