Medium
CVE-2024-46632
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Low
CVE-2024-47197
Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentials
Medium
CVE-2024-9177
Themedy Toolbox <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Medium
CVE-2024-10632
Nokaut Offers Box <= 1.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-47334
Zoho Flow for WordPress <= 2.8.0 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-8922
Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php
Medium
CVE-2024-47336
Terms descriptions <= 3.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5429
Logo Slider <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7149
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-47335
Bit Form – Contact Form Plugin <= 2.13.11 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-47338
WPExperts Square For GiveWP <= 1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-47337
Joy Of Text Lite <= 2.3.1 - Missing Authorization
Medium
CVE-2024-10634
Nokaut Offers Box <= 1.4.0 - Cross-Site Request Forgery to Plugin Setting Reset
High
CVE-2024-47331
Multi Step for Contact Form <= 2.7.7 - Unauthenticated SQL Injection
Medium
CVE-2024-47332
Sky Addons for Elementor <= 2.5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47333
Loops & Logic <= 4.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-9049
Beaver Builder – WordPress Page Builder <= 2.8.3.6 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Group Module
Medium
CVE-2024-8965
Absolute Reviews <= 1.1.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Criteria Name
Medium
CVE-2024-8633
Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-1728
Gradio allows users to access arbitrary files
Medium
CVE-2024-9115
Common Tools for Site <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9117
Mapplic Lite <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9125
king_IE <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9127
Super Testimonials <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.