Critical
CVE-2024-28179
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-23821
GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)
Medium
CVE-2024-23819
GeoServer's MapML HTML Page vulnerable to Stored Cross-Site Scripting (XSS)
Medium
CVE-2024-23818
GeoServer's WMS OpenLayers Format vulnerable to Stored Cross-Site Scripting (XSS)
Medium
CVE-2024-23643
GeoServer's GWC Seed Form vulnerable to Stored Cross-Site Scripting (XSS)
Medium
CVE-2024-23642
GeoServer's Simple SVG Renderer vulnerable to Stored Cross-Site Scripting (XSS)
Medium
CVE-2024-23640
GeoServer's Style Publisher vulnerable to Stored Cross-Site Scripting (XSS)
Medium
CVE-2024-23634
GeoServer Arbitrary file renaming vulnerability in REST Coverage/Data Store API
Medium
CVE-2023-51445
Stored Cross-Site Scripting (XSS) vulnerability in GeoServer's REST Resources API
High
CVE-2023-51444
Arbitrary file upload vulnerability in GeoServer's REST Coverage Store API
High
CVE-2023-41877
GeoServer log file path traversal vulnerability
Medium
CVE-2024-2311
Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-2341
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-4965
Invitation Code Content Restriction Plugin from CreativeMinds <= 1.5.4 - Reflected Cross-Site Scripting
High
CVE-2024-2344
Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry
Medium
CVE-2024-2428
The Ultimate Video Player For WordPress <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29127
Advanced Access Manager <= 6.9.20 - Reflected Cross-Site Scripting
Medium
CVE-2024-2507
JetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL
Medium
CVE-2023-6385
WordPress Ping Optimizer <= 2.35.1.3.0 - Cross-Site Request Forgery to Log Clearing
Medium
CVE-2024-2340
Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing
Medium
CVE-2024-2343
Avada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_action
Medium
CVE-2024-2543
Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor
Medium
CVE-2024-2457
Modal Window – create popup modal window <= 5.3.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-2738
Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.