Medium
CVE-2024-0256
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
CVE-2024-23513
PropertyHive <= 2.0.5 - Unauthenticated PHP Object Injection via propertyhive_currency
Medium
CVE-2024-0366
Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference
Critical
CVE-2024-23512
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks <= 3.1.4 - PHP Object Injection via wopb_wishlist and wopb_compare
Medium
CVE-2024-0668
Advanced Database Cleaner <= 3.1.3 - Authenticated(Administrator+) PHP Object Injection via process_bulk_action
High
CVE-2023-6933
Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection
Critical
CVE-2024-22309
ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection
Critical
CVE-2024-22284
Asgaros Forum <= 2.7.2 - Unauthenticated PHP Object Injection in prepare_unread_status
Medium
CVE-2023-6582
ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2023-52225
Taggbox <= 3.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-7019
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder <= 2.6.8 - Missing Authorization
Critical
CVE-2023-52218
WooCommerce Tranzila Gateway <= 1.0.8 - Unauthenticated PHP Object Injection
High
CVE-2023-52219
Gecka Terms Thumbnails <= 1.1 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2023-52202
HTML5 MP3 Player with Folder Feedburner <= 2.8.0 - Authenticated (Author+) PHP Object Injection
High
CVE-2023-52207
HTML5 MP3 Player with Playlist Free <= 3.0.0 - Authenticated (Author+) PHP Object Injecton
High
CVE-2023-52206
Page Builder: Live Composer <= 1.5.25 - Authenticated (Author+) PHP Object Injection
High
CVE-2023-52205
HTML5 SoundCloud Player <= 2.8.0 - Authenticated (Author+) PHP Object Injection
Medium
CVE-2023-52213
Rate Star Review <= 1.5.1 - Reflected Cross-Site Scripting
Critical
CVE-2023-52181
Theme per user <= 1.0.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-6384
WP User Profile Avatar <= 1.0.0 - Authenticated (Author+) Insecure Direct Object Reference to Avatar Deletion/Update
High
CVE-2023-52182
ARI Stream Quiz <= 1.3.0 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2023-52118
WP User Profile Avatar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-49777
YITH WooCommerce Product Add-Ons <= 4.3.0 - Authenticated(Shop Manager+) PHP Object Injection
Critical
CVE-2023-51505
Active Products Tables for WooCommerce <= 1.0.6 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.