Medium
CVE-2024-12733
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-12709
Bulk Me Now! <= 2.0 - Cross-Site Request Forgery to Message Deletion
Medium
CVE-2024-12735
Advance Post Prefix <= 1.1.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-12726
ClipArt <= 0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-12772
Ninja Tables – Easy Data Table <= 5.0.16 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-10215
WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change
Medium
CVE-2024-6155
Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting
Critical
CVE-2024-11642
Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion
Medium
CVE-2024-12394
Action Network <= 1.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12222
Deliver via Shipos for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via dvsfw_bulk_label_url Parameter
Medium
CVE-2024-12218
Woocommerce check pincode/zipcode for shipping <= 2.0.4 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12122
ResAds <= 2.0.6 - Reflected Cross-Site Scripting via Multiple Parameters
Medium
CVE-2024-12285
SEMA API <= 5.27 - Reflected Cross-Site Scripting via catid Parameter
High
CVE-2024-12542
linkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-11929
Responsive FlipBook Plugin Wordpress <= 2.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-11328
CLUEVO LMS, E-Learning Platform <= 1.13.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-11686
WhatsApp click to chat <= 3.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12819
Searchie <= 1.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12493
Files Download Delay <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12496
Linear <= 2.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12515
Muslim Prayer Time-Salah/Iqamah <= 1.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12514
3DVieweronline <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12067
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-11907
Skyword API Plugin <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.