High
CVE-2024-1896
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,515
Medium
CVE-2024-3074
Elementor ImageBox <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33921
ReviewX <= 1.6.21 - Missing Authorization
High
CVE-2024-2831
Calendar <= 1.3.14 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-33929
Directorist <= 7.8.6 - Missing Authorization
Medium
CVE-2024-3023
AnnounceKit <= 2.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-33932
Login Logout Register Menu <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3368
All in One SEO <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-33275
Improper neutralization of SQL parameter in Webbax - Super Newsletter module for PrestaShop
Critical
CVE-2024-33273
Improper neutralization of SQL parameter in ShipUp module for PrestaShop
High
CVE-2023-45385
Improper Limitation of a Pathname to a Restricted Directory in ProQuality - Print Shipping Labels Pro module for PrestaShop
Critical
CVE-2024-33267
Improper neutralization of SQL parameter in Hero - Payment module for PrestaShop
High
CVE-2024-33270
Exposure of Private Personal Information to an Unauthorized Actor in FME Modules - Customer File Upload-Attach File on Product,Cart pages module for PrestaShop
High
CVE-2024-33274
Improper Limitation of a Pathname to a Restricted Directory in FME Modules - Custom Checkout Fields, Add Custom Fields to Checkout module for PrestaShop
Medium
CVE-2024-33883
ejs lacks certain pollution protection
Medium
CVE-2024-33851
mdanter/ecc affected by timing vulnerability in cryptographic side-channels
Medium
CVE-2024-31828
Lavalite CMS Cross Site Scripting vulnerability
High
CVE-2023-34423
Survey Maker – Best WordPress Survey Plugin <= 3.6.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-35764
Survey Maker <= 4.0.9 - IP Address Spoofing
Medium
CVE-2024-33669
Passbolt Browser Extension leaks password information
Medium
CVE-2024-33670
Passbolt API allows HTML injection
Medium
CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT b
Medium
CVE-2024-33677
Contact Form 7 Extension For Mailchimp <= 0.5.73 - Cross-Site Request Forgery
Medium
CVE-2024-3553
Tutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.