Medium
CVE-2024-5312
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,543
Medium
CVE-2024-4045
Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation <= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-5315
Dolibarr vulnerable to SQL Injection
Critical
CVE-2024-5314
Dolibarr vulnerable to SQL Injection
Medium
CVE-2024-5218
Reviews and Rating – Google Reviews <= 5.2 - Authenticated (Author+) Stored Cross-Site Scripting
Low
CVE-2023-1001
vxe-table Cross-site Scripting vulnerability
Medium
CVE-2024-36361
Pug allows JavaScript code execution if an application accepts untrusted input
Medium
CVE-2024-4858
Testimonial Carousel For Elementor <= 10.2.0 - Missing Authorization to Limited Setting Update
Medium
CVE-2024-5229
Primary Addon for Elementor <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
Medium
CVE-2024-5220
ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-4270
SVGMagic <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
High
CVE-2024-3966
Pray For Me <= 1.0.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-4480
WP Prayer II <= 2.4.7 - Cross-Site Request Forgery to Email Settings Update
Medium
CVE-2024-3993
AZAN Plugin <= 0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-35297
WP Booking <= 2.4.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2024-3992
Amen <= 3.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4005
Social Pixel <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4271
SVGator – Add Animated SVG Easily <= 1.2.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-1295
The Events Calendar Free & Pro <= 6.4.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Events Access
Medium
CVE-2024-3965
Pray For Me <= 1.0.4 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-3971
Similarity <= 3.0 - Cross-Site Request Forgery to Plugin Reset
Medium
CVE-2024-3977
WordPress Jitsi Shortcode <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5155
Inquiry Cart <= 3.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-3754
Alemha Watermarker <= 1.3.1 - Authenticated (Author+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.