High
CVE-2024-4404
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2024-5551
WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion
Medium
CVE-2024-0892
Schema App Structured Data <= 2.2.0 - Cross-Site Request Forgery
Medium
CVE-2024-1565
EmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL
Low
CVE-2024-3073
Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI
Critical
CVE-2024-4371
CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-0979
Dashboard Widgets Suite <= 3.4.3 - Reflected Cross-Site Scripting
Medium
ghsa-hjx6-f647-mvf9
Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components
Low
CVE-2024-1722
Keycloak Denial of Service via account lockout
Low
CVE-2021-3754
Keycloak's improper input validation allows using email as username
High
CVE-2024-34065
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
Medium
CVE-2024-31217
@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling
Low
CVE-2024-29181
@strapi/plugin-content-manager leaks data via relations via the Admin Panel
Medium
CVE-2024-4615
Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget
Medium
CVE-2024-5265
WPBakery Page Builder <= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attribute
Medium
CVE-2024-37629
SummerNote Cross Site Scripting Vulnerability
Medium
CVE-2024-5757
Elementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widget
Medium
CVE-2024-5787
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Widget
High
CVE-2024-36263
Apache Submarine Server Core has a SQL Injection Vulnerability
Critical
CVE-2024-36265
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core.
Critical
CVE-2024-36264
** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine Commons Utils.
Critical
CVE-2024-4315
parisneo/lollms Local File Inclusion (LFI) attack
Medium
CVE-2024-2040
Himer <= 2.1.0 - Cross-Site Request Forgery to Private Group Join
Medium
CVE-2024-2234
Himer <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.