Medium
CVE-2024-5615
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-4757
Logo Manager For Enamad <= 0.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-4001
Download Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode
Medium
CVE-2024-5149
BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness
Critical
CVE-2024-4295
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash
Medium
CVE-2024-4759
Mime Types Extended <= 0.11 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Medium
CVE-2024-2368
Mollie Forms <= 2.6.13 - Cross-Site Request Forgery to Arbitrary Post Duplication
Medium
CVE-2024-5317
Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1
Medium
CVE-2024-5459
Restaurant Menu and Food Ordering <= 2.4.16 - Missing Authorization to Menu Creation
Medium
CVE-2024-34051
Reflected Cross-Site Scripting (XSS) in Dolibarr
Medium
ghsa-5j86-5xvg-7q93
TYPO3 Cross-Site Scripting (XSS) in form component
Medium
ghsa-vgm8-r9gm-fw59
TYPO3 Cross-Site Scripting in legacy form component
Medium
CVE-2024-5485
SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! <= 1.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trigger Link Shortcode
Medium
CVE-2024-3031
Fluid Notification Bar <= 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4462
Nafeza Prayer Time <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-3555
Social Link Pages: link-in-bio landing pages for your social media profiles <= 1.6.9 - Missing Authorization to Arbitrary Page Creation and Cross-Site Scripting
High
CVE-2024-2019
WP-DB-Table-Editor <= 1.8.4 - Missing Authorization to Authenticated(Contributor+) Database Access
Medium
CVE-2024-1718
Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update
Medium
CVE-2024-4697
Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via heading_tag Parameter
Medium
CVE-2024-2382
Authorize.net Payment Gateway For WooCommerce <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass
Medium
ghsa-cg4m-qjjp-7497
TYPO3 Cross-Site Scripting in link validator component
Medium
ghsa-6fc6-cj2j-h22x
TYPO3 Multiple Cross-Site Scripting vulnerabilities in frontend
High
ghsa-9895-53fc-98v2
TYPO3 SQL Injection in dbal
Medium
CVE-2024-1717
Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.