High
CVE-2024-28181
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2024-28252
CoreWCF NetFraming based services can leave connections open when they should be closed
Low
ghsa-879p-8gw4-mcpw
fgr Vulnerable to Insecure Default Variable Initialization
Medium
CVE-2024-2497
RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`
Critical
CVE-2024-28752
SSRF vulnerability using the Aegis DataBinding in Apache CXF
Medium
CVE-2024-23944
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling
Medium
CVE-2024-2509
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29099
Evergreen Content Poster <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-27997
Visual Composer Website Builder <= 45.6.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-29098
WP Calameo <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6525
ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-27987
GiveWP <= 3.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-27995
ARMember <= 4.0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-27990
The Moneytizer <= 9.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-27993
Calendarista Basic Edition <= 3.0.2 - Unauthenticated Cross-Site Scripting
High
CVE-2024-1812
Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url
Medium
CVE-2024-29089
Five Star Restaurant Menu <= 2.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-27994
YITH WooCommerce Product Add-Ons <= 4.5.0 - Unuathenticated Cross-Site Scripting
Medium
CVE-2024-2042
ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
Medium
CVE-2024-2294
Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2024-27996
Survey Maker <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-29102
Extensions For CF7 <= 3.0.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-2287
Knight Lab Timeline <= 3.9.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-29091
WP Armour – Honeypot Anti Spam <= 2.1.13 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.