High
CVE-2022-25377
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-1291
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1311
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-1806
ProfilePress <= 4.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via profilepress-edit-profile Shortcode
Medium
CVE-2024-1365
YML for Yandex Market <= 4.2.3 - Reflected Cross-Site Scripting
Medium
85e17f3a-cec1-41de-b3e2-ac06a9c9290f
KODO Qiniu <= 1.5.0 - Cross-Site Request Forgery
Medium
CVE-2024-1165
Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-1293
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1758
SuperFaktura WooCommerce <= 1.40.3 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Medium
CVE-2024-0976
WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin
Low
CVE-2023-5775
BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password
Medium
CVE-2024-1296
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1710
Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-1810
Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-1071
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.1.3 - 2.8.2 - Unauthenticated SQL Injection
Medium
CVE-2024-26152
Summary
High
ghsa-rc4p-p3j9-6577
pypqc private key retrieval vulnerability
Medium
CVE-2023-44379
baserCMS Cross-site Scripting vulnerability in Site search Feature
Medium
CVE-2023-51450
baserCMS OS command injection vulnerability in Installer
Medium
CVE-2024-26128
baserCMS Cross-site Scripting vulnerability in Content Management
Critical
ghsa-97m3-52wr-xvv2
Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE
Medium
CVE-2024-25876
Enhavo Cross-site Scripting vulnerability
Medium
CVE-2024-25874
Enhavo Cross-site Scripting vulnerability
Medium
CVE-2024-25875
Enhavo Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.