Medium
CVE-2024-0249
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-7196
Ultimate Noindex Nofollow Tool <= 1.1.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-7231
illi Link Party! <= 1.0 - Missing Authorization to Unauthenticated Arbitrary Link Deletion
Medium
CVE-2023-5932
Travelpayouts <= 1.1.13 - Reflected Cross-Site Scripting
Medium
CVE-2023-7174
aBitGone CommentSafe <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Cross-Site Request Forgery
Medium
CVE-2023-6953
PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting
Medium
CVE-2024-0703
Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-0612
Content Views <= 3.6.2 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-0587
Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-6591
Popup Box Business (7.0.0 - 7.9.0) and Developer (20.0.0 - 20.9.0) - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-0761
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
Medium
CVE-2023-6843
easy.jobs <= 2.4.6 - Missing Authorization to Settings Update
Medium
CVE-2024-0679
ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2023-51415
GiveWP <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-23504
Ninja Tables <= 5.0.5 - Missing Authorization
Medium
CVE-2023-6082
Chartjs <= 2023.2 - Authenticated(Editor+) Stored Cross-Site Scripting via chart
Medium
CVE-2023-4637
WPvivid <= 0.9.94 - Missing Authorization
Critical
CVE-2024-0709
Cryptocurrency Widgets – Price Ticker & Coins List 2.0 - 2.6.5 - Unauthenticated SQL Injection
Medium
CVE-2024-22308
Simple Membership <= 4.4.1 - Open Redirect
Medium
CVE-2024-0623
VK Block Patterns <= 1.31.1.1 - Cross-Site Request Forgery
Critical
CVE-2024-22309
ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-22307
WP-Lister Lite for eBay <= 3.5.7 - Reflected Cross-Site Scripting via 's'
Medium
CVE-2023-6499
lasTunes <= 3.6.1 - Cross-Site Request Forgery
Medium
CVE-2024-23505
PDF Viewer & 3D PDF Flipbook – DearPDF <= 2.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.