High
CVE-2024-8795
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-44039
WP Travel <= 9.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-8716
XT Ajax Add To Cart for WooCommerce <= 1.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-8801
Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2024-44035
Gum Elementor Addon <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44041
IdeaPush <= 8.66 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-8624
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-8284
Download Manager <= 3.2.98 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8103
WP Category Dropdown <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parameter
Medium
CVE-2024-44043
Photo Gallery by 10Web <= 1.8.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-2439
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2024-44038
Sunshine Photo Cart <= 3.2.9 - Missing Authorization
Medium
CVE-2024-44042
WP Datepicker <= 2.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-44040
ShiftController Employee Shift Scheduling <= 4.9.64 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-8794
BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset
Medium
CVE-2024-8628
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.70.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44045
WP Abstracts <= 2.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2024-8671
WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite
Low
CVE-2023-5359
W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext
Critical
CVE-2024-8791
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation
Medium
CVE-2024-44036
Kodex Posts likes <= 2.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-47226
A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/config-revisions/ Add action. An authenticated user
Medium
CVE-2024-8680
MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-42346
Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations end
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.