High
CVE-2023-5663
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-1526
Hubbub Lite <= 1.31.0 - Unauthenticated Information Exposure
Medium
CVE-2024-2262
Themify – WooCommerce Product Filter <= 1.4.3 - Cross-Site Request Forgery
Medium
CVE-2024-1237
Elementor Header & Footer Builder <= 1.6.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2293
Site Reviews <= 6.11.4 - Authenticated(Subscriber+) Stored Cross-Site Scripting via display name
Medium
CVE-2024-1537
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table
Medium
CVE-2024-0906
f(x) Private Site <= 1.2.1 - Sensitive Information Exposure
Medium
CVE-2024-1328
Newsletter2Go <= 4.0.14 - Authenticated(Subscriber+) Stored Cross-Site Scripting via style
Medium
CVE-2023-4728
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Missing Authorization on publish_lp()
Medium
CVE-2023-4626
LadiApp <= 4.4 - Missing Authorization via ladiflow_save_hook()
Medium
CVE-2024-1400
Mollie Forms <= 2.6.3 - Missing Authorization to Arbitrary Post Duplication
Medium
CVE-2024-1645
Mollie Forms <= 2.6.3 - Missing Authorization
Medium
CVE-2024-2263
Themify – WooCommerce Product Filter <= 1.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-4731
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via init_endpoint
High
CVE-2024-1536
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar
Medium
CVE-2023-4628
LadiApp <= 4.4 - Cross-Site Request Forgery via ladiflow_save_hook()
Medium
CVE-2024-1843
Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink
Medium
CVE-2024-2278
Themify – WooCommerce Product Filter <= 1.4.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-28754
raspap-webgui vulnerable to denial of service
Medium
CVE-2024-1767
Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2123
Ultimate Member <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1125
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
CVE-2024-1363
Easy Accordion – Best Accordion FAQ Plugin for WordPress <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1320
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.