Medium
CVE-2024-0653
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-4266
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-6748
Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure
Medium
CVE-2024-0627
Custom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name
Medium
CVE-2024-5090
SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget
Medium
CVE-2023-6745
Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-4934
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37297
WooCommerce 8.8.0 - 8.9.2 - Reflected Cross-Site Scripting via Order Attribution
High
CVE-2024-37568
lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified in a jwt.decode call, HMAC verification is allowed with any asymmetric public key. (T
High
ghsa-rcm4-jv5g-wccm
zfr authentication adapter did not verify validity of tokens
High
ghsa-3x57-m5p4-rgh4
ZendOpenID potential security issue in login mechanism
Critical
ghsa-6fqw-j3vm-7f66
Zendframework1 Potential SQL injection in ORDER and GROUP functions
High
ghsa-848f-mph5-9pm9
Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability
High
ghsa-8xhv-gqm4-3w99
ZendFramework1 Potential Insufficient Entropy Vulnerability
Critical
ghsa-v42g-7q2x-cw32
Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
High
ghsa-mg4x-prh7-g4mx
Zend-Captcha Information Disclosure and Insufficient Entropy vulnerability
Critical
ghsa-2x36-qhx3-7m5f
ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select
High
ghsa-9v78-h226-2rmq
Zendframework potential security issue in login mechanism
Critical
ghsa-x86x-qhf8-f37w
willdurand/js-translation-bundle potential path traversal attack and remote code injection
High
ghsa-97h7-mf38-g9mf
Adminer file disclosure vulnerability
Medium
ghsa-78hm-5hjw-58mh
ua-parser/uap-php ReDoS vulnerability
Medium
ghsa-qg7m-mwxm-j3h7
Zend-developer-tools information disclosure vulnerability
Medium
ghsa-4vf6-mq7w-3hp6
Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed
Medium
ghsa-fq4p-86hh-42v9
Zend-Diactoros URL Rewrite vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.