Critical
CVE-2024-49332
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2024-49611
Product Website Showcase <= 1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-10076
Jetpack <= 13.7 & Jetpack Boost <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10075
Jetpack <= 13.7 - Unauthenticated Arbitrary Block & Shortcode Execution
Critical
CVE-2024-49326
Affiliator <= 2.1.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-49610
photokit <= 1.0 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-49324
Sovratec Case Management <= 1.0.0 - Unauthenticated Arbitrary File Upload
High
CVE-2024-49330
Nice Backgrounds <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-49331
Property Lot Management System <= 1.0 - Authenticated (Salesman+) Arbitrary File Upload
Critical
CVE-2024-49328
WP REST API FNS <= 1.0.0 - Privilege Escalation
Medium
CVE-2024-10080
WP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
Critical
CVE-2024-49604
Simple User Registration <= 6.7 - Missing Authorization to Account Takeover
Medium
CVE-2024-49323
All in One Slider <= 1.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-49329
WP REST API FNS <= 1.0.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-9898
Parallax Image <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via dd-parallax Shortcode
Medium
CVE-2024-46212
Path traversal in redaxo
Medium
CVE-2024-8920
Fonto – Custom Web Fonts Manager <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-9184
SendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site Scripting
Low
CVE-2024-47836
Admidio Vulnerable to HTML Injection In The Messages Section
Medium
CVE-2024-11942
Drupal core vulnerable to improper error handling
Medium
CVE-2024-9240
ReDi Restaurant Reservation <= 24.0902 - Reflected Cross-Site Scripting
High
CVE-2024-45217
Insecure Default Initialization of Resource vulnerability in Apache Solr
Critical
CVE-2024-45216
Improper Authentication vulnerability in Apache Solr
Critical
CVE-2024-9863
Miniorange OTP Verification with Firebase <= 3.6.0 - Privilege Escalation via Registration due to Administrator Default User Role Value
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.