Medium
CVE-2024-4977
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-3632
Smart Image Gallery <= 1.0.18 - Cross-Site Request Forgery
Medium
CVE-2024-3753
Hostel <= 1.1.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-5287
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Profile Update
Medium
CVE-2024-5472
WP QuickLaTeX <= 3.8.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5286
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Banner Editing
Medium
CVE-2024-5079
Wp EMember <= 10.6.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-5167
CM Email Registration Blacklist and Whitelist <= 1.4.8 - Cross-Site Request Forgery
Medium
CVE-2024-5282
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Registration Form
Medium
CVE-2024-5713
If-So Dynamic Content Personalization <= 1.8.0.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-5080
Wp EMember <= 10.6.5 - Authenticated (Admin+) Arbitrary File Upload
Critical
CVE-2024-5450
Bug Library <= 2.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-3751
Seriously Simple Podcasting <= 3.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5283
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Lead Editing
Medium
CVE-2024-3919
OpenPGP Form Encryption for WordPress <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5644
WordPress Plugin Tournamatch < 4.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3026
WordPress Button Plugin MaxButtons <= 9.7.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-5151
SULly <= 4.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5280
WP Affiliate Platform <= 6.5.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-5002
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20240319 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5442
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Gallery
High
CVE-2024-3593
UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2024-4874
Bricks Builder <= 1.9.8 - Insecure Direct Object Reference
Medium
CVE-2024-5966
Grey Opaque <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Download-Button Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.