Medium
CVE-2024-45127
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-45124
Magento Open Source Improper Access Control vulnerability
Medium
CVE-2024-45125
Magento Open Source Incorrect Authorization vulnerability
Medium
CVE-2024-45117
Magento Open Source Improper Input Validation vulnerability
Low
CVE-2024-48949
Elliptic's verify function omits uniqueness validation
Medium
CVE-2024-9211
FULL – Cliente <= 3.1.22 - Reflected Cross-Site Scripting
Medium
CVE-2024-9610
Language Switcher <= 3.7.13 - Reflected Cross-Site Scripting
Critical
CVE-2024-9234
GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-9232
Download Plugins and Themes in ZIP from Dashboard <= 1.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-9586
Linkz.ai <= 1.1.8 - Missing Authorization to Unauthenticated Plugin Settings Update
Medium
CVE-2024-9587
Linkz.ai <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update via AJAX
Critical
CVE-2024-9707
Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
Medium
CVE-2024-9436
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.14 - Reflected Cross-Site Scripting
Medium
CVE-2024-8700
Event Calendar <= 1.0.4 - Missing Authorization to Unauthenticated Arbitrary Calendar Deletion
Medium
CVE-2024-9221
Tainacan <= 0.21.10 - Reflected Cross-Site Scripting
High
CVE-2024-9201
SEUR Oficial <= 2.2.10.2 - Unauthenticated SQL Injection
Medium
CVE-2024-9538
ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template
Medium
CVE-2024-9543
Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode
Critical
CVE-2024-9822
Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator
Medium
CVE-2024-8701
Event Calendar <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9346
Embed videos and respect privacy <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-8913
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template
Medium
CVE-2024-9611
Increase upload file size & Maximum Execution Time limit <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-7041
open-webui Insecure Direct Object Reference (IDOR) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.