High
CVE-2024-49754
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-6628
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request Forgery
Medium
CVE-2024-10884
SimpleForm Contact Form Submissions <= 2.1.0 - Reflected Cross-Site Scripting
High
CVE-2024-9839
Uix Slideshow <= 1.6.5 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2024-9192
WP Video Robot <= 1.20.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update
High
CVE-2024-9849
Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder <= 4.8 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2024-9615
BulkPress <= 0.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-9938
Bounce Handler MailPoet 3 <= 1.3.21 - Reflected Cross-Site Scripting
Medium
CVE-2024-9850
SVG Case Study <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10015
ConvertCalculator for WordPress <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and type Parameter
Medium
CVE-2024-11118
404 Error Monitor <= 1.1 - Cross-Site Request Forgery to Plugin Settings Update via updatePluginSettings Function
Medium
CVE-2024-10262
Drop Shadow Boxes <= 1.7.14 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-10017
PJW Mime Config <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-9935
PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download
Medium
CVE-2024-10147
Steel <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn Shortcode
Medium
CVE-2024-11092
SVGPlus <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-11085
WP Log Viewer <= 1.2.1 - Missing Authorization
Medium
CVE-2024-10875
Gallery Manager <= 1.6.58 - Reflected Cross-Site Scripting
Medium
CVE-2024-10883
SimpleForm – Contact form made simple <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-0737
CSRF leading to delete account in wallabag/wallabag
Medium
CVE-2021-3991
Improper Authorization in dolibarr/dolibarr
Critical
CVE-2021-3838
Deserialization of Untrusted Data in dompdf/dompdf
Critical
CVE-2021-3902
Improper Restriction of XML External Entity Reference in dompdf/dompdf
Medium
CVE-2021-3841
Cross site scripting in sylius/sylius
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.