High
CVE-2024-1895
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,504
High
CVE-2024-1897
Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode
Medium
CVE-2024-33909
iPages Flipbook <= 1.5.1 - Missing Authorization
Medium
CVE-2024-3021
Mhr Post Ticker <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-33919
RomethemeKit For Elementor <= 1.4.1 - Missing Authorization
Medium
CVE-2024-33937
Progressive WordPress (PWA) <= 2.1.13 - Missing Authorization
Medium
CVE-2024-3554
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-33912
Academy LMS <= 1.9.16 - Missing Authorization
Medium
CVE-2024-3206
Different Menu in Different Pages – Control Menu Visibility (All in One) <= 2.3.2 - Missing Authorization to Menu Duplication
Medium
CVE-2024-33923
SP Project & Document Manager <= 4.69 - Missing Authorization
Medium
CVE-2024-0847
5280 Bootstrap Modal Contact Form <= 1.0 - Cross-Site Request Forgery to Bulk Delete Messages
Medium
CVE-2024-3717
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure
Medium
CVE-2024-4083
Easy Restaurant Table Booking <= 1.0.0 - Cross-Site Request Forgery
High
CVE-2024-1896
Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode
Medium
CVE-2024-3074
Elementor ImageBox <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33921
ReviewX <= 1.6.21 - Missing Authorization
High
CVE-2024-2831
Calendar <= 1.3.14 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-33929
Directorist <= 7.8.6 - Missing Authorization
Medium
CVE-2024-3023
AnnounceKit <= 2.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-33932
Login Logout Register Menu <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3368
All in One SEO <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-33275
Improper neutralization of SQL parameter in Webbax - Super Newsletter module for PrestaShop
Critical
CVE-2024-33273
Improper neutralization of SQL parameter in ShipUp module for PrestaShop
High
CVE-2023-45385
Improper Limitation of a Pathname to a Restricted Directory in ProQuality - Print Shipping Labels Pro module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.