High
CVE-2024-24759
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-7713
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.0.9 - Unauthenticated OpenAI Key Exposure
Medium
CVE-2024-6517
Contact Form 7 Math Captcha <= 3.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-7714
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.0.9 - Missing Authorization
Critical
CVE-2024-8292
WP-Recall – Registration, Profile, Commerce & More <= 16.26.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update
Medium
CVE-2024-44051
Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-7599
Advanced Sermons <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-7349
LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection
High
CVE-2024-44000
LiteSpeed Cache <= 6.4.1 - Unauthenticated Sensitive Information Exposure via Log Files
High
CVE-2024-8247
Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation
Medium
CVE-2024-7415
Remember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7380
Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion
Medium
CVE-2024-7381
Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution
Medium
CVE-2024-6894
RD Station <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6332
Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-6929
Dynamic Featured Image <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter
Medium
CVE-2024-8363
Share This Image <= 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode
Medium
CVE-2024-45399
Indico has a Cross-Site-Scripting during account creation
Medium
CVE-2024-8391
Vertx gRPC server does not limit the maximum message size
Unrated
CVE-2024-13272
drupal/paragraphs_table - SA-CONTRIB-2024-036
Unrated
CVE-2024-13271
drupal/content_entity_clone - SA-CONTRIB-2024-035
Unrated
CVE-2024-13270
drupal/freelinking - SA-CONTRIB-2024-034
Medium
CVE-2024-6719
Offload Videos – Bunny.net, AWS S3 <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2022-4529
Security, Antivirus, Firewall – S.A.F <= 2.3.5 - IP Address Spoofing to Protection Mechanism Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.