Medium
CVE-2024-5282
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-5713
If-So Dynamic Content Personalization <= 1.8.0.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-5080
Wp EMember <= 10.6.5 - Authenticated (Admin+) Arbitrary File Upload
Critical
CVE-2024-5450
Bug Library <= 2.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-3751
Seriously Simple Podcasting <= 3.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5283
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Lead Editing
Medium
CVE-2024-3919
OpenPGP Form Encryption for WordPress <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5644
WordPress Plugin Tournamatch < 4.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3026
WordPress Button Plugin MaxButtons <= 9.7.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-5151
SULly <= 4.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5280
WP Affiliate Platform <= 6.5.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-5002
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20240319 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5442
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Gallery
High
CVE-2024-3593
UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2024-4874
Bricks Builder <= 1.9.8 - Insecure Direct Object Reference
Low
CVE-2024-5967
Keycloak leaks configured LDAP bind credentials through the Keycloak admin console
Medium
CVE-2024-5966
Grey Opaque <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Download-Button Shortcode
Medium
CVE-2024-5965
Mosaic <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Medium
CVE-2024-5346
Flatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Medium
CVE-2024-4313
Table Addons for Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter
High
CVE-2024-5791
Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-6120
Sparkle Demo Importer <= 1.4.7 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import
Medium
CVE-2024-38874
events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability
Medium
CVE-2024-38873
FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.