Medium
CVE-2024-3988
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-3548
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox
Medium
CVE-2024-3730
Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-3749
SP Project & Document Manager <= 4.71 - Insecure Direct Object Reference to Information Exposure
Medium
CVE-2024-3929
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Post Overlay
Medium
CVE-2024-3734
FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-3647
Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style'
Medium
CVE-2024-3733
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure
Medium
CVE-2024-3407
WP Prayer <= 2.0.9 - Cross-Site Request Forgery to Arbitrary Prayer Deletion
Medium
CVE-2024-3994
Tutor LMS – eLearning and online course solution <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tutor_instructor_list' Shortcode
High
CVE-2024-3045
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-3728
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle
Medium
CVE-2024-32584
TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.5.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Medium
CVE-2024-4003
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-3047
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-3822
Base64 Encoder/Decoder <= 0.9.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-3630
HL Twitter <= 2014.1.18 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4035
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.21 - Authenticated (Author+) Cross-Site Scripting
Medium
CVE-2024-3629
HL Twitter <= 2014.1.18 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-3748
SP Project & Document Manager <= 4.71 - Insecure Direct Object Reference
Critical
CVE-2014-8089
Zend Framework SQL injection vulnerability
High
CVE-2024-32866
Conform contains a Prototype Pollution Vulnerability in `parseWith...` function
Critical
CVE-2024-28253
OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)
Medium
CVE-2024-31208
Synapse V2 state resolution weakness allows Denial of Service (DoS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.