Critical
CVE-2024-34386
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-34417
Viet Nam Affiliate <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4532
Business Card <= 1.0.0 - Cross-Site Request Forgery to Arbitrary Card Deletion
Medium
CVE-2024-34421
BlogLentor <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34367
Popup box <= 4.1.2 - Cross-Site Request Forgery
High
CVE-2024-3240
ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-34380
Conversational Forms for ChatBot <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-34381
PropertyHive <= 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6854
Breakdance <= 1.7.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom postmeta
Medium
CVE-2024-34373
The Plus Addons for Elementor Page Builder Lite <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-34384
Sina Extension for Elementor <= 3.5.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-3868
Folders Pro <= 3.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User First Name and Last Name
Medium
CVE-2024-1050
Import and export users and customers <= 1.26.5 - Missing Authorization
Medium
CVE-2024-4193
Testimonial Slider <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34368
Mooberry Book Manager <= 4.15.12 - Unauthenticated Information Exposure via Export Files
Medium
CVE-2024-34372
Post Grid Master <= 3.4.7 - Missing Authorization
Critical
CVE-2024-34434
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-34383
SEOPress <= 7.6.1 - Information Exposure
Medium
CVE-2024-34382
Robo Gallery <= 3.2.18 - Unauthenticated Information Exposure
Medium
CVE-2024-1230
SimpleShop <= 2.10.0 - Cross-Site Request Forgery
Medium
CVE-2024-4335
Rank Math SEO with AI Best SEO Tools <= 1.0.217 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3915
Swift Framework <= 2.7.31 - Missing Authorization to Unauthenticated Arbitrary Content Update
Medium
CVE-2024-34366
Download Alt Text AI <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3916
Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.