High
CVE-2024-8102
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-7870
PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion
Medium
CVE-2024-8031
Secure Downloads <= 1.2.2 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2024-8106
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-8119
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via page
High
CVE-2024-8104
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2024-8117
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_option
Medium
CVE-2020-36830
ReDoS in urlregex
Medium
CVE-2024-8758
Quiz and Survey Master (QSM) <= 9.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-7846
YITH WooCommerce Ajax Search <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8854
Polls CP <= 1.0.76 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8851
Polls CP <= 1.0.76 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5053
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification
Medium
CVE-2024-8285
Missing hostname validation in Kroxylicious
High
ghsa-2r6g-7r83-jg72
`spam` project on PyPI compromised, malicious releases made
High
ghsa-qr4w-53vh-m672
opencv-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
High
ghsa-cxjf-x6jp-p7mc
opencv-contrib-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
High
ghsa-jh2j-j4j9-crg3
opencv-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
High
ghsa-w2pj-9cgh-mq2c
opencv-contrib-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
High
ghsa-xm4r-5rj9-2pg3
gratient 0.5 contains credential harvesting code
High
ghsa-x6xg-3fj2-4pq3
`exotel` project on PyPI compromised, malicious release made
Medium
CVE-2024-8108
Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
High
CVE-2024-7717
WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection
Medium
CVE-2024-8276
WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.