Medium
CVE-2024-5058
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2024-4098
Shariff Wrapper <= 4.6.13 - Unauthenticated Local File Inclusion
High
CVE-2024-35778
Slideshow SE <= 2.5.17 - Authenticated (Author+) Limited Local File Inclusion
High
CVE-2024-35780
Page Builder: Live Composer <= 1.5.42 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-5156
Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-3204
Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update
Medium
CVE-2024-5059
Event Management Tickets Booking <= 1.4.3 - Unauthenticated Information Exposure
High
CVE-2024-35781
Word Balloon <= 4.21.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-5036
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-35776
phpinfo() WP <= 5.0 - Unauthenticated Information Exposure
High
CVE-2024-5605
Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter
Critical
CVE-2024-5432
Lifeline Donation <= 1.2.6 - Authentication Bypass
Medium
CVE-2024-35779
Page Builder: Live Composer <= 1.5.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3894
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title
Medium
CVE-2024-1407
Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership Modification
Medium
CVE-2024-5649
Universal Slider <= 1.6.5 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-5768
MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-5724
Photo Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-4873
Replace Image <= 1.1.10 - Insecure Direct Object Reference
Medium
CVE-2024-4623
Blogmentor – Blog Layouts for Elementor <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagination_style Parameter
Critical
CVE-2024-5021
WordPress Picture / Portfolio / Media Gallery <= 3.0.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-3984
EmbedSocial – Social Media Feeds, Reviews and Galleries <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2381
AliExpress Dropshipping with AliNext Lite <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-4450
AliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.