Medium
CVE-2024-10075
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2024-49326
Affiliator <= 2.1.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-49610
photokit <= 1.0 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-49324
Sovratec Case Management <= 1.0.0 - Unauthenticated Arbitrary File Upload
High
CVE-2024-49330
Nice Backgrounds <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-49331
Property Lot Management System <= 1.0 - Authenticated (Salesman+) Arbitrary File Upload
Critical
CVE-2024-49328
WP REST API FNS <= 1.0.0 - Privilege Escalation
Medium
CVE-2024-10080
WP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
Critical
CVE-2024-49604
Simple User Registration <= 6.7 - Missing Authorization to Account Takeover
Medium
CVE-2024-49323
All in One Slider <= 1.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-49329
WP REST API FNS <= 1.0.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-9898
Parallax Image <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via dd-parallax Shortcode
Medium
CVE-2024-8920
Fonto – Custom Web Fonts Manager <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-9184
SendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-9240
ReDi Restaurant Reservation <= 24.0902 - Reflected Cross-Site Scripting
Critical
CVE-2024-9863
Miniorange OTP Verification with Firebase <= 3.6.0 - Privilege Escalation via Registration due to Administrator Default User Role Value
Medium
CVE-2024-9213
Persian WooCommerce SMS <= 7.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9940
Calculated Fields Form <= 5.2.45 - HTML Injection
High
CVE-2024-9215
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.7.1 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary User Email Update and Account Takeover
Medium
CVE-2024-7417
Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure
Medium
CVE-2024-9934
Wp-ImageZoom <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-8719
Flexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site Scripting
Critical
CVE-2024-9862
Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change
Medium
CVE-2024-9351
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Quiz Creation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.