Medium
CVE-2024-6855
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-6852
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-6797
DL Robots.txt <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-6924
TrueBooker <= 1.0.3 - Unauthenticated SQL Injection
Medium
CVE-2024-6798
DL Verification <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6859
WP MultiTasking <= 0.1.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-42468
CometVisu Backend for openHAB has a path traversal vulnerability
Critical
CVE-2024-42469
CometVisu Backend for openHAB affected by RCE through path traversal
Medium
CVE-2024-42470
CometVisu Backend for openHAB has a sensitive information disclosure vulnerability
High
CVE-2024-42467
CometVisu Backend for openHAB affected by SSRF/XSS
Medium
CVE-2024-7648
Opal Membership <= 1.2.4 - Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2024-7621
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Critical
CVE-2024-7503
WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
Medium
CVE-2024-7649
Opal Membership <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-43227
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43233
BSK Forms Blacklist <= 3.8 - Reflected Cross-Site Scripting
Low
CVE-2024-6692
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text
Medium
CVE-2024-43230
Shared Files <= 1.7.28 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-43232
Timeline and History slider <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43219
Persian WooCommerce <= 7.1.6 - Missing Authorization
Medium
CVE-2024-43218
Mediavine Control Panel <= 2.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-3673
Web Directory Free <= 1.7.2 - Unauthenticated Local File Inclusion
Medium
CVE-2024-43213
WC Marketplace <= 4.1.17 - Reflected Cross-Site Scripting
Medium
CVE-2024-43210
LA-Studio Element Kit for Elementor <= 1.3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.