Critical
CVE-2024-43978
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-43999
Ninja Forms <= 3.8.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-2440
Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization
High
CVE-2024-43982
Login As Users <= 1.4.3 - Missing Authorization to Privielge Escalation via Account Takeover
Medium
CVE-2024-43971
Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-43983
Podlove Podcast Publisher <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43973
GetPaid <= 2.8.11 - Missing Authorization via column_subscription()
Medium
CVE-2024-43979
Blockbooster <= 1.0.10 - Missing Authorization
Medium
CVE-2024-5857
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion
High
CVE-2024-43975
Super Store Finder <= 6.9.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-43970
SureCart <= 2.29.3 - Reflected Cross-Site Scripting
High
CVE-2024-7856
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2024-6551
GiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure
Critical
CVE-2024-43976
Super Store Finder <= 6.9.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-43984
Podlove Podcast Publisher <= 4.1.13 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2024-43969
Spiffy Calendar <= 4.9.12 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-43974
ReviveNews <= 1.0.2 - Missing Authorization via revivenews_install_and_activate_plugins()
Medium
CVE-2024-43972
PageLayer <= 1.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-7606
Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-43968
Newspack <= 3.8.6 - Missing Authorization
Medium
CVE-2024-8051
Special Feed Items <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-8093
Posts reminder <= 0.20 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-8043
Vikinghammer Tweet <= 0.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-6311
Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.