Medium
CVE-2024-8790
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-8740
GetResponse Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-8916
Suki Sites Import <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9350
DPD Baltic Shipping <= 1.2.83 - Reflected Cross-Site Scripting
Medium
CVE-2024-9361
Bulk images optimizer: Resize, optimize, convert to webp, rename ... <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
Medium
CVE-2024-9364
SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Medium
CVE-2024-9373
Elemenda <= 0.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9382
Gantry 4 Framework <= 4.1.21 - Reflected Cross-Site Scripting
Medium
CVE-2024-9383
Parcel Pro <= 1.8.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-9366
Easy Menu Manager | WPZest <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10040
Infinite-Scroll <= 2.6.2 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2024-10014
Flat UI Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via flatbtn Shortcode
Medium
CVE-2024-10049
Edit WooCommerce Templates <= 1.1.2 - Reflected Cross-Site Scripting via page
Medium
CVE-2024-49580
JetBrains Ktor information disclosure
High
CVE-2024-49622
Apa Banner Slider <= 1.0.0 - Cross-Site Request Forgery to SLQ Injection
Medium
CVE-2024-8378
Safe SVG <= 2.2.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-10027
WP Booking Calendar <= 10.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-9703
Arconix Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-9206
MAS Companies For WP Job Manager <= 1.0.13 - Reflected Cross-Site Scripting
Medium
CVE-2024-10078
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
High
CVE-2024-10079
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2024-49327
Woostagram Connect <= 1.0.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-49607
WP Dropbox Dropins <= 1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-49325
Photo Gallery Builder <= 3.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.