Medium
CVE-2024-54442
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2024-55977
LaunchPage.app Importer <= 1.1 - Unauthenticated SQL Injection
Critical
CVE-2024-55976
Critical Site Intel <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2024-49677
Bootstrap Buttons <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-55991
WordPress CRM Plugin – WP-CRM System <= 3.2.9.1 - Missing Authorization
Medium
CVE-2024-54443
Advanced Data Table For Elementor <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-55972
eTemplates <= 0.2.1 - Unauthenticated SQL Injection
Medium
CVE-2024-55993
Job Board Manager <= 2.1.60 - Missing Authorization
Medium
CVE-2024-56007
Leader <= 2.6.1 - Missing Authorization
Medium
CVE-2024-56002
Contact Form, Survey & Form Builder – MightyForms <= 1.3.9 - Missing Authorization
Medium
CVE-2024-55973
TSB Occasion Editor <= 1.2.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-55983
PowerFormBuilder <= 1.0.6 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-55982
Share Buttons – Social Media <= 1.0.2 - Unauthenticated SQL Injection
High
CVE-2024-56008
Spreadr Woocommerce <= 1.0.4 - Missing Authorization to Arbitrary Content Deletion
Medium
CVE-2024-55995
Torod – The smart shipping and delivery portal for e-shops and retailers <= 1.7 - Missing Authorization to Unauthenticated Plugin Settings Update
Medium
CVE-2024-56011
Responsive Google Maps | by imbaa <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-55981
Nabz Image Gallery <= v1.00 - Unauthenticated SQL Injection
High
CVE-2024-55990
Mollie for Contact Form 7 <= 5.0.0 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-55986
Service <= 1.0.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-54441
Utech World Time <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56009
Spreadr Woocommerce <= 1.0.4 - Missing Authorization
High
CVE-2024-55975
Dr Affiliate <= 1.2.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-54350
hmd <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56005
Posti Shipping <= 3.10.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.