Medium
550872c8-3663-48fa-ab3f-f90351f3e169
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-1129
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred()
Medium
CVE-2024-24801
OWL Carousel <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-24796
Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently <= 4.1.1 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save
Medium
CVE-2024-0796
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Cross-Site Request Forgery
Medium
CVE-2023-47526
Chartify <= 2.0.6 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-24711
WooCommerce Conversion Tracking <= 2.0.11 - Missing Authorization via wcct_install_happy_addons
Medium
CVE-2024-24705
Accessibility <= 1.0.6 - Cross-Site Request Forgery
Medium
CVE-2024-24714
Icons Font Loader <= 1.1.4 - Authenticated(Administrator+) Arbitrary File Upload
Medium
CVE-2024-24803
Ultra Companion <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-7069
Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-24703
MultiVendorX Marketplace <= 4.0.25 - Missing Authorization
Medium
CVE-2024-0907
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records()
Medium
CVE-2024-24712
Heateor Social Login <= 1.1.30 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-6165
Restrict Usernames Emails Characters <= 3.1.3 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-0256
Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social Settings
Medium
CVE-2024-1061
HTML5 Video Player <= 2.5.24 - Unauthenticated SQL Injection via id
Medium
CVE-2024-0797
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Missing Authorization
Medium
CVE-2024-23521
Happyforms <= 1.25.10 - Missing Authorization
Medium
CVE-2024-23519
Email Before Download <= 6.9.7 - Cross-Site Request Forgery
Medium
CVE-2024-23518
ACF Photo Gallery Field <= 2.6 - Missing Authorization in apgf_update_donation
Medium
CVE-2024-23516
CC BMI Calculator <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-23511
The Plus Addons for Elementor <= 5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-23513
PropertyHive <= 2.0.5 - Unauthenticated PHP Object Injection via propertyhive_currency
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.