Medium
CVE-2024-34791
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-5088
Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34770
Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2024-4620
ARForms Form Builder <= 6.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-34768
Fastly <= 1.2.25 - Missing Authorization via AJAX actions
Critical
CVE-2024-5023
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
Medium
CVE-2024-4789
Cost Calculator Builder Pro <= 3.1.72 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2024-34273
njwt Prototype Pollution vulnerability
Critical
CVE-2024-3551
Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion
High
CVE-2024-4181
RunGptLLM class in LlamaIndex has a command injection
Medium
CVE-2024-4263
A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises
High
CVE-2024-3848
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of ar
High
CVE-2024-4321
A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to impro
Medium
CVE-2024-3134
Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2619
Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injection
Medium
CVE-2024-3609
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization
Medium
CVE-2024-4204
Bulk Posts Editing For WordPress <= 4.2.3 - Cross-Site Request Forgery
High
CVE-2024-4733
ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-4891
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34763
Builder for WooCommerce reviews shortcodes – ReviewShort <= 1.01.5 - Missing Authorization
Low
ghsa-f57v-q966-7fh6
Monolog Header injection in NativeMailerHandler
Critical
ghsa-8j7c-682x-r9f2
Magento RCE,XSS and other vulnerabilities
Medium
ghsa-mcfc-67vm-j568
Magento Cross-Site Scripting (XSS) vulnerability
Critical
ghsa-5gmh-85x8-5cx7
Magento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.