High
CVE-2024-6180
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-5881
Webico Slider Flatsome Addons <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wbc_image Shortcode
Medium
CVE-2024-4667
Blog, Posts and Category Filter for Elementor <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post and Category Filter Widget
Medium
CVE-2024-6169
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'
Medium
CVE-2024-6366
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.7 - Missing Authorization to Unauthenticated Media Upload
High
CVE-2024-6320
ScrollTo Top <= 1.2.2 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-6170
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'
High
CVE-2024-6321
ScrollTo Bottom <= 1.1.1 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2024-6310
Advanced AJAX Page Loader <= 2.7.7 - Cross-Site Request Forgery to Arbitrary File Upload
Critical
CVE-2024-6314
IQ Testimonials <= 2.2.7 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-6365
Product Table by WBW <= 2.0.1 - Unauthenticated Remote Code Execution
Critical
CVE-2024-6313
Gutenberg Forms <= 2.2.9 - Unauthenticated Arbitrary File Upload
High
CVE-2024-5792
Houzez CRM <= 1.4.2 - Authenticated (Seller+) SQL Injection
Medium
CVE-2024-6168
Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery via AJAX actions
High
CVE-2024-6166
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection
Medium
CVE-2024-5882
Ultimate Classified Listings <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2023-7062
Advanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-3228
Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure
High
CVE-2024-6309
Attachment File Icons (AF Icons) <= 1.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-4483
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6171
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass
High
CVE-2024-6123
Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2024-5793
Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection
High
CVE-2024-6316
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.