Medium
CVE-2024-43788
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2024-43414
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
High
CVE-2024-8182
Flowise Unauthenticated Denial of Service (DoS) vulnerability
High
CVE-2024-8181
Flowise Authentication Bypass vulnerability
Medium
CVE-2024-43968
Newspack <= 3.8.6 - Missing Authorization
Medium
CVE-2024-8051
Special Feed Items <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2024-8030
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-8093
Posts reminder <= 0.20 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-8043
Vikinghammer Tweet <= 0.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-6311
Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2024-7573
Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection
Medium
CVE-2024-8195
Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure
High
CVE-2025-52758
Zippy <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2024-7447
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload
Medium
CVE-2024-8052
Review Ratings <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-8092
Accordion Image Menu <= 3.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-6312
Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2024-8047
Visual Sound (old) <= 1.06 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-5170
Logo Manager For Enamad <= 0.7.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8044
infolinks Ad Wrap <= 1.0.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-8091
Enhanced Search Box <= 0.6.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-6448
Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-7791
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget
Medium
CVE-2024-8046
Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid <= 1.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.