Medium
CVE-2024-27609
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-2925
Beaver Builder – WordPress Page Builder <= 2.8.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
Medium
CVE-2024-1946
Genesis Blocks <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Content
Medium
CVE-2024-2839
Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1807
Product Sort and Display for WooCommerce <= 2.4.1 - Missing Authorization
Medium
CVE-2024-2334
Template Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template upload
Medium
CVE-2024-1732
Sharkdropship for AliExpress Dropshipping and Affiliate <= 2.2.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-1504
SecuPress Free — WordPress Security <= 2.2.5.1 - Cross-Site Request Forgery to Banned IP Address
Medium
CVE-2024-2924
Creative Addons for Elementor <= 1.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2125
EnvíaloSimple: Email Marketing y Newsletters <= 2.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-2791
Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets
Medium
CVE-2023-7252
Tickera – WordPress Event Ticketing <= 3.5.2.4 - Insecure Direct Object Reference to Information Exposure
Medium
CVE-2024-2931
WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure
High
CVE-2024-1852
WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-29900
@electron/packager's build process memory potentially leaked into final executable
Medium
CVE-2024-29901
@workos-inc/authkit-nextjs session replay vulnerability
Medium
CVE-2024-29200
Kimai API returns timesheet entries a user should not be authorized to view
High
CVE-2024-29896
Content-Security-Policy header generation in middleware could be compromised by malicious injections
High
CVE-2024-29686
Winter CMS Server-Side Template Injection (SSTI) vulnerability
High
CVE-2024-29904
CodeIgniter4 DoS Vulnerability
Medium
CVE-2024-23449
Elasticsearch Uncaught Exception leading to crash
Medium
CVE-2024-29316
Incorrect Access Control in NodeBB
Medium
CVE-2024-31097
SEO Title Tag <= 3.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-31088
AdsPlace'r – Ad Manager, Inserter, AdSense Ads <= 1.1.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.