High
CVE-2024-37092
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-37094
MasterStudy LMS <= 3.2.12 - Missing Authorization
High
CVE-2024-37108
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2024-37090
Consulting Elementor Widgets <= 1.3.0 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-37112
WishList Member X <= 3.25.1 - Unauthenticated Arbitrary SQL Execution
Medium
CVE-2024-37115
Newspack Blocks <= 3.0.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-37103
Education Zone <= 1.3.4 - Cross-Site Request Forgery to Notice Dismissal
Medium
CVE-2024-37111
WishList Member X < 3.26.7 - Unauthenticated Denial of Service
Medium
CVE-2024-6225
Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6026
Slider by 10Web <= 1.2.55 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-37101
WP Post Author <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5639
User Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update
Critical
CVE-2024-36683
Improper neutralization of SQL parameter in Smart Modules - Products Alert module for PrestaShop
Critical
CVE-2024-34989
Improper neutralization of SQL parameter in RSI PDF/HTML catalog evolution (prestapdf) module for PrestaShop
High
CVE-2024-36682
Exposure of Private Personal Information to an Unauthorized Actor in Promokit.eu - Theme settings module for PrestaShop
Critical
CVE-2024-36681
Improper neutralization of SQL parameter in Promokit.eu - Isotope module for PrestaShop
Critical
CVE-2023-50029
Improper Control of Generation of Code in PrestaAddons - M4 PDF Extensions module for PrestaShop
High
CVE-2024-34992
Improper neutralization of SQL parameter in FME Modules - Help Desk - Customer Support Management System module for PrestaShop
High
CVE-2024-34991
Exposure of Private Personal Information to an Unauthorized Actor in Quadra Informatique - Axepta module for PrestaShop
Critical
CVE-2024-34988
Improper neutralization of SQL parameter in Buy Addons - Complete for Create a Quote in Frontend + Backend Pro module for PrestaShop
Medium
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Medium
CVE-2024-38357
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Medium
CVE-2024-38355
socket.io has an unhandled 'error' event
Medium
CVE-2024-4390
Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.