Medium
CVE-2024-1323
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-1291
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1311
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-1806
ProfilePress <= 4.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via profilepress-edit-profile Shortcode
Medium
CVE-2024-1365
YML for Yandex Market <= 4.2.3 - Reflected Cross-Site Scripting
Medium
85e17f3a-cec1-41de-b3e2-ac06a9c9290f
KODO Qiniu <= 1.5.0 - Cross-Site Request Forgery
Medium
CVE-2024-1165
Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-1293
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1758
SuperFaktura WooCommerce <= 1.40.3 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Medium
CVE-2024-0976
WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin
Low
CVE-2023-5775
BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password
Medium
CVE-2024-1296
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1710
Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-1810
Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-1071
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.1.3 - 2.8.2 - Unauthenticated SQL Injection
Medium
CVE-2024-1590
Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
Medium
CVE-2024-0827
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Cross-Site Request Forgery
Medium
CVE-2024-1360
Colibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin Installation
Medium
CVE-2024-1778
Admin side data storage for Contact Form 7 <= 1.1.1 - Missing Authorization to Unauthenticated Bookmark Status Alteration
Medium
CVE-2024-1777
Admin side data storage for Contact Form 7 <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2024-1362
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh
High
CVE-2024-0203
Digits <= 8.4.1 - Cross-Site Request Forgery to Privilege Escalation
High
CVE-2024-1772
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-1776
Admin side data storage for Contact Form 7 <= 1.1.1 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.