Medium
CVE-2024-34546
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-3952
Advanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget
Medium
CVE-2024-34559
Ghost <= 1.4.0 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-4606
Ultimate Store Kit Elementor Addons <= 2.0.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-4281
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
Critical
CVE-2024-4393
Social Connect <= 1.2 - Authentication Bypass
Medium
CVE-2024-34562
Move Addons for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34445
SKT Addons for Elementor <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Page Title
Medium
CVE-2024-1693
SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update
Medium
CVE-2024-34553
Stockholm Core <= 2.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-34556
Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Unauthenticated Information Exposure
Medium
CVE-2024-34547
Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) <= 1.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-3954
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-3068
Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3989
HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify
Medium
CVE-2024-34435
Aiomatic <= 1.9.3 - Missing Authorization
High
CVE-2024-34246
wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platforms/app/main.c.
Critical
CVE-2024-34249
wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_compile.c.
High
CVE-2024-34252
wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3_compile.c.
Medium
CVE-2024-34529
Nebari through 2024.4.1 prints the temporary Keycloak root password.
Medium
CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because the conf_path os.open does not use a mode parameter during file creation.
Medium
CVE-2024-34415
Thim Elementor Kit <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34414
raindrops <= 1.600 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-34416
Pk Favicon Manager <=2.1 - Authenticated (Admin+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.