Medium
CVE-2024-38277
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-38273
Moodle BigBlueButton web service leaks meeting joining information
Medium
CVE-2024-38274
Moodle stored XSS via calendar's event title when deleting the event
High
CVE-2024-37821
Dolibarr arbitrary file upload vulnerability
Medium
CVE-2024-38275
Moodle HTTP authorization header is preserved between "emulated redirects"
Medium
CVE-2024-38276
Moodle CSRF risks due to misuse of confirm_sesskey
Medium
CVE-2024-3894
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title
Medium
CVE-2024-1407
Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership Modification
Medium
CVE-2024-5649
Universal Slider <= 1.6.5 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-5768
MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-5724
Photo Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-4873
Replace Image <= 1.1.10 - Insecure Direct Object Reference
Medium
CVE-2024-4623
Blogmentor – Blog Layouts for Elementor <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagination_style Parameter
Critical
CVE-2024-5021
WordPress Picture / Portfolio / Media Gallery <= 3.0.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-3984
EmbedSocial – Social Media Feeds, Reviews and Galleries <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2381
AliExpress Dropshipping with AliNext Lite <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-4450
AliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functions
Medium
CVE-2024-4663
OSM Map Widget for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Medium
CVE-2024-5970
MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode
Medium
CVE-2024-4632
WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-5853
Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2023-6495
YARPP – Yet Another Related Posts Plugin <= 5.30.9 - Authenticated(Administrator+) Cross-Site Scripting
Medium
CVE-2024-3410
DN Footer Contacts <= 1.6.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-35768
Page Builder: Live Composer <= 1.5.47 - Authenticated (Author+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.