Medium
CVE-2024-1070
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-25097
TNC PDF viewer <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-1160
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link
Medium
CVE-2024-25094
PJ News Ticker <= 1.9.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Critical
CVE-2024-25912
MoveTo <= 6.2 - Missing Authorization to Unauthenticated Options Update
Medium
CVE-2024-25908
WP Media folder <= 5.7.2 - Missing Authorization to Authenticated(Subscriber+) Title Modification
Medium
CVE-2024-25597
Ultimate Reviews <= 3.2.8 - Unauthenticated stored Cross-Site Scripting via reviews
Medium
CVE-2024-25591
WP Editor <= 1.2.7 - Sensitive Information Exposure via log file
Medium
CVE-2024-25904
TinyMCE Professional Formats and Styles <= 1.1.2 - Cross-Site Request Forgery via bb_taps_backend_page
Medium
CVE-2024-25914
SMTP Mail Plugin <= 1.3.20 - Cross Site Request Forgery
Medium
CVE-2024-25915
Pexels: Free Stock Photos <= 1.2.2 - Authenticated (Contributor+) Server-Side Request Forgery
Critical
CVE-2024-25913
MoveTo <= 6.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-25598
Livemesh Addons for Elementor <= 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via animated_text_class
Medium
CVE-2024-1236
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-25905
Multi Step Form <= 1.7.18 - Cross-Site Request Forgery
Medium
CVE-2024-25906
Comments Like Dislike <= 1.2.2 - IP Spoofing
Medium
CVE-2024-1337
SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection
Medium
CVE-2024-25594
MyWaze <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-25592
Broken Link Checker <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-25596
Doofinder for WooCommerce <= 2.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-25098
PB oEmbed HTML5 Audio <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
High
CVE-2023-52428
Denial of Service in Connect2id Nimbus JOSE+JWT
Medium
CVE-2024-23724
Ghost has possible Cross-site Scripting issue
Medium
CVE-2024-25916
My Calendar <= 3.4.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.