Medium
CVE-2023-6892
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,538
Medium
CVE-2024-32675
Order Limit for WooCommerce <= 2.0.0 - Missing Authorization
High
CVE-2024-3810
Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2024-32687
WPC Frequently Bought Together for WooCommerce <= 7.0.3 - Missing Authorization
Medium
CVE-2024-32689
WP Social Comments <= 1.7.3 - Missing Authorization via wpfc_allow_comments()
Medium
CVE-2024-32683
Wp Ultimate Review <= 2.2.5 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2024-32686
Backup Migration <= 1.4.3 - Information Exposure via Log Files
Medium
CVE-2024-1429
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget
Medium
CVE-2024-3811
Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2024-32680
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.5.2 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2024-32676
LoginPress Pro < 3.0 - Captcha Bypass
Medium
CVE-2024-32688
MyRewards <= 5.3.0 - Missing Authorization
Medium
CVE-2024-32678
TrackShip for WooCommerce <= 1.7.5 - Missing Authorization
Medium
CVE-2024-1426
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget
Medium
CVE-2023-6897
EAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode
Medium
CVE-2024-32684
Wp Ultimate Review <= 2.2.5 - Missing Authorization
Medium
CVE-2024-32677
LoginPress Pro < 3.0 - Missing Authorization to License Status Update
Low
CVE-2024-27086
MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service
Critical
CVE-2024-3660
Keras code injection vulnerability
High
CVE-2024-22262
Spring Framework URL Parsing with Host Validation
Critical
CVE-2024-3271
llama-index-core Command Injection vulnerability
Medium
CVE-2024-3575
Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb
Critical
CVE-2024-3573
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_loc
High
CVE-2024-1560
mlflow vulnerable to Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.