Medium
CVE-2024-51821
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-51903
WP Listings Pro <= 3.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51936
ESB Testimonials <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24538
BuddyPress Groups Extras <= 3.6.10 - Cross-Site Request Forgery
Medium
CVE-2024-51874
ParOne Feeds <= 1.17.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51940
WP Responsive Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51860
Custom Dashboard Widget <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10325
Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-51987
HTTP Client uses incorrect token after refresh
High
CVE-2024-47072
XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream
Medium
CVE-2024-10187
myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
Medium
CVE-2024-10269
Easy SVG Support <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10621
Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2015-3542
PHPExcel XXE Vulnerability
Low
CVE-2024-51758
Filament has exported files stored in default (`public`) filesystem if not reconfigured
Medium
CVE-2024-43436
Moodle vulnerable to site administration SQL injection via XMLDB editor
Medium
CVE-2024-43438
Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
Medium
CVE-2024-43426
Moodle has arbitrary file read risk through pdfTeX
Medium
CVE-2024-43440
Moodle LFI vulnerability when restoring malformed block backups
High
CVE-2024-43425
Moodle Remote Code Execution vulnerability
Medium
CVE-2024-43428
Moodle vulnerable to cache poisoning via injection into storage
Medium
CVE-2024-43431
Moodle's IDOR in badges allows deletion of arbitrary badges
High
CVE-2024-43434
Moodle has CSRF risk in Feedback non-respondents report
High
CVE-2024-51504
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.