Low
CVE-2024-51752
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2024-10028
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log
Medium
CVE-2024-10084
Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode
Critical
CVE-2024-48050
In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. Within this function, the line result = eval(s) poses a security risk as it can d
High
CVE-2024-9946
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.13.68 - Authentication Bypass via Disqus OAuth provider
Medium
CVE-2024-10715
MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block
Medium
CVE-2025-24749
EZPZ SAML SP Single Sign On (SSO) <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-10471
Everest Forms <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10543
Tumult Hype Animations <= 1.9.14 - Missing Authorization
Medium
CVE-2024-10647
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL
High
CVE-2024-10020
Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider
Medium
CVE-2024-10535
Video Gallery for WooCommerce <= 1.31 - Missing Authorization to Unauthenticated Limited File Deletion
Critical
CVE-2024-51734
Access control vulnerable to user data deletion by anonynmous users
Critical
CVE-2024-51501
CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes
Medium
CVE-2024-9178
XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9878
Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-10687
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injection
Medium
CVE-2024-7429
Zotpress <= 7.3.12 - Missing Authorization
High
CVE-2024-10711
WooCommerce Report <= 1.5.1 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2024-9667
Seriously Simple Podcasting <= 3.5.0 - Reflected Cross-Site Scripting via add_query_arg Parameter
Medium
CVE-2024-9443
Basticom Framework <= 1.5.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-51127
hornetq vulnerable to file overwrite, sensitive information disclosure
High
CVE-2024-23590
Apache Kylin Session Fixation vulnerability
Medium
CVE-2024-51762
PropertyShift <= 1.0.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.