Medium
CVE-2023-6962
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-32601
Popup Anything <= 2.8.0 - Missing Authorization
Medium
CVE-2024-32036
SixLabors.ImageSharp vulnerable to data leakage
Medium
CVE-2024-32035
SixLabors.ImageSharp vulnerable to Memory Allocation with Excessive Size Value
Critical
CVE-2024-28056
AWS Amplify CLI has incorrect trust policy management
Medium
CVE-2024-32489
TCPDF Cross-site Scripting vulnerability
Medium
CVE-2024-1357
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode
Medium
CVE-2024-3773
LiveJournal Shortcode <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-7064
Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer
Medium
CVE-2024-0904
Fancy Product Designer < 6.1.81 - Authenticated (Admin+) Stored Cross-Site Scripting via License Field
Medium
CVE-2024-32550
BMI Adult & Kid Calculator <= 1.2.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-2751
Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via InfoBox
Medium
CVE-2024-32516
Multi Currency For WooCommerce <= 1.5.5 - Missing Authorization
Medium
CVE-2024-32533
LH Add Media From Url <= 1.22 - Reflected Cross-Site Scripting
Medium
CVE-2024-32546
Tax Rate Upload <= 2.4.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-2876
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection
Medium
CVE-2024-32524
Custom Order Statuses for WooCommerce <= 1.5.2 - Missing Authorization
Medium
CVE-2024-32543
MJ Update History <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-3756
MF Gig Calendar <= 1.2.1 - Cross-Site Request Forgery to Event Deletion
Medium
CVE-2024-32548
What's New Generator <= 2.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-2328
Real Media Library <= 4.22.11 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-32535
Access Category Password <= 1.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-32539
WP File Download Light <= 1.3.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-32513
Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More <= 13.3.1 - Sensitive Information Exposure via Log Files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.