Medium
CVE-2024-6499
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2024-7129
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.42 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2024-8120
ImageRecycle pdf & image compression <= 3.1.14 - Cross-Site Request in Several AJAX Actions
High
CVE-2024-7863
Favicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-7133
My Sticky Bar <= 2.7.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0926
Custom Permalinks <= 2.6.0 - Authenticated(Editor+) Stored Cross-Site Scripting
Critical
CVE-2024-7568
Favicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Deletion
High
CVE-2024-7656
Image Hotspot by DevVN <= 1.2.5 - Authenticated (Author+) PHP Object Injection
Critical
CVE-2024-7772
Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-6850
Carousel Slider <= 2.2.13 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-5502
Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
High
CVE-2024-7258
WooCommerce Google Feed Manager <= 2.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Deletion
High
CVE-2024-7559
File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-7766
Adicon Server <= 1.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-3163
Easy Property Listings <= 3.5.3 - Cross-Site Request Forgery
Medium
CVE-2024-7816
Gixaw Chat <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-7820
ILC Thickbox <= 1.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-7861
Misiek Paypal <= 1.1.20090324 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-6723
AI Engine <= 2.4.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-7822
Quick Code <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-7860
Simple Headline Rotator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-8056
MM-Breaking News <= 0.7.9 - Reflected Cross-Site Scripting
Critical
CVE-2024-43918
WBW Product Table Pro <= 1.9.4 - Unauthenticated Arbitrary SQL Execution
Medium
CVE-2024-7818
Misiek Photo Album <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.