High
CVE-2024-37497
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-37482
The Post Grid <= 7.7.4 - Missing Authorization via AJAX
Medium
CVE-2024-37506
Charitable <= 1.8.1.7 - Missing Authorization to Unauthorized Donation
Medium
CVE-2024-37480
Apollo13 Framework Extensions <= 1.9.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-37483
The Post Grid <= 7.7.4 - Missing Authorization via save_block_css
Medium
CVE-2024-37504
FileBird Document Library <= 2.0.6 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-37418
Church Admin <= 4.4.6 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-37484
Zephyr Project Manager <= 3.3.97 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update
Medium
CVE-2024-37485
bbPress Notify <= 2.18.3 - Reflected Cross-Site Scripting
High
CVE-2024-37501
Advanced Classifieds & Directory Pro <= 3.1.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37487
WP Directory Kit <= 1.3.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-37486
Paid Memberships Pro <= 3.0.5 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-37952
Book Your Travel <= 8.18.17 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-37508
Construction Landing Page <= 1.3.5 - Cross-Site Request Forgery
Medium
CVE-2024-37498
Table & Contact Form 7 Database – Tablesome <= 1.0.33 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-37500
Beaver Builder <= 2.8.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37488
HelloAsso <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37495
Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37489
Ocean Extra <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-5943
Nested Pages <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusion
High
CVE-2024-34750
Apache Tomcat - Denial of Service
High
CVE-2024-2385
Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets
Medium
CVE-2024-3638
Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets
Medium
CVE-2024-2926
Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.