Medium
CVE-2024-37227
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-2872
Swift Framework < 2024.04.30 Authenticated (Contributor+) Stored Cross-Site Scripting via Caption Title
Medium
CVE-2024-37881
SiteGuard WP Plugin <= 1.7.6 - Login Page Disclosure
Medium
CVE-2024-2696
Swift Framework < 2024.04.30 Authenticated (Admin+) Stored Cross-Site Scripting via Auth
Medium
CVE-2024-5596
ARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functions
High
CVE-2024-3112
Quotes and Tips by BestWebSoft <= 1.44 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-6023
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Email Adding
Medium
CVE-2024-37218
Page Builder Sandwich – Front-End Page Builder <= 5.1.0 - Missing Authorization
High
CVE-2024-37234
Academy LMS <= 2.0.10 - Open Redirect
Medium
CVE-2024-37223
Restaurant Reservations <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2484
Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets
Medium
CVE-2024-2430
Website Content in Page or Post <= 2024.03.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37220
Optinly <= 1.0.18 - Missing Authorization
Medium
CVE-2024-0974
Social Media Widget <= 4.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6024
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Group/Email Deletion
High
CVE-2024-37818
Strapi Server-Side Request Forgery (SSRF)
Critical
CVE-2024-6027
Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter
Medium
CVE-2024-5859
Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting
Critical
CVE-2024-37899
XWiki Platform allows remote code execution from user account
Critical
CVE-2024-5756
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin
High
CVE-2024-6162
Undertow's url-encoded request path information can be broken on ajp-listener
Medium
CVE-2024-3961
ConvertKit <= 2.4.9 - Missing Authorization
Medium
CVE-2024-5344
The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget
High
CVE-2024-5503
WP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.