Medium
CVE-2024-35653
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-35668
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.77 - Reflected Cross-Site Scripting
Medium
CVE-2024-35667
WP EasyCart <= 5.5.19 - Missing Authorization
Medium
CVE-2024-35654
Responsive <= 5.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35661
Upload Fields for WPForms <= 1.0.2 - Missing Authorization
Medium
CVE-2024-3888
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
Medium
CVE-2024-4637
Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex
Medium
CVE-2024-35662
Simple COD Fees for WooCommerce <= 2.0.2 - Missing Authorization
Medium
CVE-2024-4899
SEOPress <= 7.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35655
Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content <= 0.6.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-35663
WP Translate <= 5.3.0 - Missing Authorization
Medium
CVE-2024-35649
Save as PDF Plugin by Pdfcrowd <= 3.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35669
Debug Log Manager <= 2.3.1 - Missing Authorization
Medium
CVE-2024-35670
Integrate Google Drive <= 1.3.93 - Missing Authorization
Low
CVE-2024-36119
Password confirmation stored in plain text via registration form in statamic/cms
High
CVE-2024-4990
Unsafe Reflection in base Component class in yiisoft/yii2
High
CVE-2024-36114
Decompressors can crash the JVM and leak memory content in Aircompressor
High
CVE-2024-29415
ip SSRF improper categorization in isPublic
Medium
CVE-2024-32877
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
Medium
CVE-2024-4344
Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery
Medium
CVE-2024-6478
CTT Expresso para WooCommerce <= 3.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-34009
Moodle ReCAPTCHA can be bypassed on the login page
Medium
CVE-2024-34006
Moodle Unsanitized HTML in site log for config_log_created
Medium
CVE-2024-34007
Moodle Logout CSRF in admin/tool/mfa/auth.php
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.