Medium
CVE-2024-35761
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-39681
Cooked – Recipe Management <= 1.7.15.4 - Cross-Site Request Forgery to Template Apply
Medium
CVE-2024-39680
Cooked – Recipe Management <= 1.7.15.4 - Cross-Site Request Forgery to Settings Update
Low
CVE-2024-40637
dbt has an implicit override for built-in materializations from installed packages
Critical
ghsa-q5fm-55c2-v6j9
Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib
High
ghsa-g4m4-9q4c-mfw6
Fiona affected by CVE-2020-14152 related to madler-zlib
Critical
CVE-2024-6220
简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-5703
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization
Medium
CVE-2024-5582
Schema & Structured Data for WP & AMP <= 1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Medium
CVE-2024-5254
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-6669
AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-5255
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5252
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5253
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-5251
Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2024-39700
JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option include `update-integration-tests.yml` workflow which has a
High
CVE-2024-6660
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload
Medium
CVE-2024-39887
Apache Superset vulnerable to improper SQL authorization
Medium
CVE-2024-3973
House Manager – Easy Renter Management System for WordPress <= 1.0.8.4 - Reflected Cross-Site Scripting
High
CVE-2024-6467
BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
Medium
CVE-2024-6766
Shortcodes Ultimate Pro <= 7.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-6651
WordPress File Upload <= 4.24.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-7084
Ajax Search Lite < 4.12 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-38768
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) <= 2.0.8.6 - Authenticated (contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.