Critical
CVE-2024-8292
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-44051
Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-7599
Advanced Sermons <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7349
LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection
High
CVE-2024-44000
LiteSpeed Cache <= 6.4.1 - Unauthenticated Sensitive Information Exposure via Log Files
High
CVE-2024-8247
Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation
Medium
CVE-2024-7415
Remember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7380
Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion
Medium
CVE-2024-7381
Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution
Medium
CVE-2024-6894
RD Station <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6332
Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-6929
Dynamic Featured Image <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter
Medium
CVE-2024-8363
Share This Image <= 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode
Medium
CVE-2024-6719
Offload Videos – Bunny.net, AWS S3 <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2022-4529
Security, Antivirus, Firewall – S.A.F <= 2.3.5 - IP Address Spoofing to Protection Mechanism Bypass
Medium
CVE-2024-8618
Page Builder: Pagelayer <= 1.8.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8090
JavaScript Logic <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-5309
Form Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functions
Medium
CVE-2024-7878
WP ULike <= 4.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-7627
Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition
Medium
CVE-2024-45429
Advanced Custom Fields <= 6.3.5 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2024-7892
adstxt Plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-3556
Cab fare calculator <= 1.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6845
Chatbot with ChatGPT <= 2.4.5 - Missing Authorization to Unauthenticated OpenAI API Key Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.