High
CVE-2024-11104
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-11381
Control horas <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10568
Ajax Search Lite <= 4.12.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-52797
Searching Opencast may cause a denial of service
High
CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
Medium
CVE-2024-10890
WPAdverts – Classifieds Plugin <= 2.1.7 - Reflected Cross-Site Scripting
Unrated
CVE-2024-13296
drupal/mailjet - SA-CONTRIB-2024-062
High
CVE-2024-55638
Drupal core contains a potential PHP Object Injection vulnerability
Medium
CVE-2024-11334
My Contador lesr <= 2.0 - Missing Authorization to Unauthenticated User Registration CSV Export
High
CVE-2024-55637
Drupal core contains a potential PHP Object Injection vulnerability
Low
CVE-2024-55636
Drupal core contains a potential PHP Object Injection vulnerability
Medium
CVE-2024-55634
Drupal core - SA-CORE-2024-004
Medium
CVE-2024-12393
Drupal core - SA-CORE-2024-003
High
CVE-2024-10788
Activity Log – Monitor & Record User Changes <= 2.11.1 - Unauthenticated Stored Cross-Site Scripting via Event Context
Medium
CVE-2024-10177
Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via beds24-link Shortcode
Medium
CVE-2024-10172
WPBakery Visual Composer WHMCS Elements <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via void_wbwhmcse_laouts_search Shortcode
Medium
CVE-2024-10532
Bard Extra <= 1.2.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import
Medium
CVE-2024-10164
Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode
Medium
CVE-2024-10522
Co-marquage service-public.fr <= 0.5.76 - Reflected Cross-Site Scripting via add_query_arg Parameter
Medium
CVE-2024-11197
Lock User Account <= 1.0.5 - User Lock Bypass
Medium
CVE-2024-11360
Page Parts <= 1.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-11365
Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes <= 1.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-11370
Subaccounts for WooCommerce <= 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11354
Ultimate YouTube Video & Shorts Player With Vimeo <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Playlist/Video Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.